aiden
/
mastodon
mirror of https://github.com/mastodon/mastodon
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
mastodon/spec/models
History
David Leadbeater 69378eac99
Don't allow URLs that contain non-normalized paths to be verified () 
* Don't allow URLs that contain non-normalized paths to be verified

This stops things like https://example.com/otheruser/../realuser where
"/otheruser" appears to be the verified URL, but the actual URL being
verified is "/realuser" due to the "/../".

Also fix a test to use 'https', so it is testing the right thing, now
that since  https is required.

* missing do
..
account Don't allow URLs that contain non-normalized paths to be verified ()
admin Add customizable user roles ()
concerns Add ability to filter followed accounts' posts by language ()
trends Add support for language preferences for trending statuses and links ()
web Fix various typos ()
account_alias_spec.rb Add account migration UI ()
account_conversation_spec.rb
…
account_deletion_request_spec.rb Change account suspensions to be reversible by default ()
account_domain_block_spec.rb
…
account_filter_spec.rb Add batch suspend for accounts in admin UI ()
account_migration_spec.rb Add account migration UI ()
account_moderation_note_spec.rb
…
account_spec.rb Fix typos ()
account_statuses_cleanup_policy_spec.rb Fix some flaky tests that randomly failed because of item ordering ()
account_statuses_filter_spec.rb Fix performance of account timelines ()
announcement_mute_spec.rb Add announcements ()
announcement_reaction_spec.rb Add announcements ()
announcement_spec.rb Add announcements ()
appeal_spec.rb Add appeals ()
backup_spec.rb
…
block_spec.rb
…
canonical_email_block_spec.rb Add canonical e-mail blocks for suspended accounts ()
conversation_mute_spec.rb
…
conversation_spec.rb Revert "Remove conversation URI ()" ()
custom_emoji_category_spec.rb
…
custom_emoji_filter_spec.rb Fix error when passing unknown filter param in REST API ()
custom_emoji_spec.rb
…
custom_filter_keyword_spec.rb Revamp post filtering system ()
custom_filter_spec.rb
…
device_spec.rb Add E2EE API ()
domain_allow_spec.rb Add whitelist mode ()
domain_block_spec.rb Allow blocking TLDs, and fix TLD blocks not being editable ()
email_domain_block_spec.rb Change e-mail domain blocks to match subdomains of blocked domains ()
encrypted_message_spec.rb Add E2EE API ()
export_spec.rb Add ability to filter followed accounts' posts by language ()
favourite_spec.rb
…
featured_tag_spec.rb
…
follow_recommendation_suppression_spec.rb Add cold-start follow recommendations ()
follow_request_spec.rb Add ability to filter followed accounts' posts by language ()
follow_spec.rb Fix follow limit preventing re-following of a moved account ()
home_feed_spec.rb Fix single Redis connection being used across all threads ()
identity_spec.rb
…
import_spec.rb Fix follow limit preventing re-following of a moved account ()
invite_spec.rb Change account suspensions to be reversible by default ()
ip_block_spec.rb Add IP-based rules ()
list_account_spec.rb
…
list_spec.rb
…
login_activity_spec.rb Add authentication history ()
marker_spec.rb Add timeline read markers API ()
media_attachment_spec.rb Change max. thumbnail dimensions to 640x360px (360p) ()
mention_spec.rb
…
mute_spec.rb
…
notification_spec.rb Improved performance of notification preloading ()
one_time_key_spec.rb Add E2EE API ()
poll_spec.rb
…
poll_vote_spec.rb Implement pending tests ()
preview_card_spec.rb
…
preview_card_trend_spec.rb Add support for language preferences for trending statuses and links ()
public_feed_spec.rb Refactor and improve tests ()
relationship_filter_spec.rb Fix followings list order | Issue ()
relay_spec.rb
…
remote_follow_spec.rb Fix uncaught domain normalization error in remote follow ()
report_filter_spec.rb
…
report_spec.rb Change how changes to media attachments are stored for edits ()
rule_spec.rb Add server rules ()
scheduled_status_spec.rb
…
session_activation_spec.rb Add Ruby 3.0 support ()
setting_spec.rb Update Mastodon to Rails 6.1 ()
site_upload_spec.rb
…
status_edit_spec.rb Add support for editing for published statuses ()
status_pin_spec.rb Add support for private pinned posts ()
status_spec.rb Change public timelines to be filtered by current locale by default ()
status_stat_spec.rb
…
status_trend_spec.rb Add support for language preferences for trending statuses and links ()
system_key_spec.rb Add E2EE API ()
tag_feed_spec.rb Fix typo in tag_feed_spec.rb ()
tag_follow_spec.rb Add ability to follow hashtags ()
tag_spec.rb Change how hashtags are normalized ()
unavailable_domain_spec.rb Change delivery failure tracking to work with hostnames instead of URLs ()
user_invite_request_spec.rb
…
user_role_spec.rb Add customizable user roles ()
user_spec.rb Add customizable user roles ()
webauthn_credentials_spec.rb Fix validates :sign_count of WebauthnCredential ()
webhook_spec.rb Add administrative webhooks ()