metu.life

Commit Graph

Author	SHA1	Message	Date
Eugen Rochko	fac529975b	Improve signature verification safeguards (#8959 ) * Downcase signed_headers string before building the signed string The HTTP Signatures draft does not mandate the “headers” field to be downcased, but mandates the header field names to be downcased in the signed string, which means that prior to this patch, Mastodon could fail to process signatures from some compliant clients. It also means that it would not actually check the Digest of non-compliant clients that wouldn't use a lowercased Digest field name. Thankfully, I don't know of any such client. * Revert "Remove dead code (#8919)" This reverts commit `a00ce8c92c`. * Restore time window checking, change it to 12 hours By checking the Date header, we can prevent replaying old vulnerable signatures. The focus is to prevent replaying old vulnerable requests from software that has been fixed in the meantime, so a somewhat long window should be fine and accounts for timezone misconfiguration. * Escape users' URLs when formatting them Fixes possible HTML injection * Escape all string interpolations in Formatter class Slightly improve performance by reducing class allocations from repeated Formatter#encode calls * Fix code style issues	6 years ago
Thibaut Girka	bb1103d974	Really fix HotKeys	6 years ago
Eugen Rochko	2459da29c2	Add description meta tag additionally to og:description (#8941 ) Fix #8685	6 years ago
Eugen Rochko	da7705b274	Add dns-prefetch if using different host for assets or uploads (#8942 )	6 years ago
mayaeh	e50cb5f4bd	Fix that the copy button of verify link did not work. (#8938 )	6 years ago
Eugen Rochko	7f9dd92a27	Track historical space stats in PgHero to determine PostgreSQL growth (#8906 )	6 years ago
Thibaut Girka	269edc0e48	Fix CW icon color in local-settings modal	6 years ago
Thibaut Girka	721aec40cd	Define some local-settings hints	6 years ago
Thibaut Girka	26409f3e8e	Add support for hints (or extended descriptions) in local-settings pages	6 years ago
Thibaut Girka	5f308a7f05	When screen width is too narrow, hide local-settings page text, keep only icons	6 years ago
Thibaut Girka	6cd793f0ac	Change “preferences” icon to match settings page icon	6 years ago
Thibaut Girka	edb9ec8543	Add icons for each of the local-setting pages	6 years ago
Thibaut Girka	d0b1369a85	Fix app-wide hotkeys randomly failing to work	6 years ago
mayaeh	87abbb07f3	Add Japanese translations. (#8927 )	6 years ago
mayaeh	770e337497	Fixed error occurrence when pinning the DM column. (#8922 )	6 years ago
Thibaut Girka	96c3d26870	Move “Show action buttons in collapsed toots” option	6 years ago
Thibaut Girka	faecb35fe0	Switch from selects to radio buttons for local settings, improve styling	6 years ago
ashleyhull-versent	f194857ac9	rubocop issues - Cleaning up (#8912 ) * cleanup pass * undo mistakes * fixed. * revert	6 years ago
Eugen Rochko	a00ce8c92c	Remove dead code (#8919 ) SignatureVerification#matches_time_window? is not called anywhere.	6 years ago
ashleyhull-versent	2dba313100	Replace SVG asset with Custom mascot (#8766 )	6 years ago
Eugen Rochko	774ac47373	Add conversations API (#8832 ) * Add conversations API * Add web UI for conversations * Add test for conversations API * Add tests for ConversationAccount * Improve web UI * Rename ConversationAccount to AccountConversation * Remove conversations on block and mute * Change last_status_id to be a denormalization of status_ids * Add optimistic locking	6 years ago
Thibaut Girka	a3677a828d	[Glitch] Change documentation URL Port `28401962ca` to glitch-soc	6 years ago
Thibaut Girka	b4ba1058b8	[Glitch] RTL: fix margins of public-account-header__tabs Port `185cb2dc3a` to glitch-soc	6 years ago
ThibG	25744d43b0	Ensure only toots from the reported users are reported (#8916 )	6 years ago
Thibaut Girka	7cc7843109	Do not scroll timelines when closing media modals Media modals push an history state so that pressing back on mobile closes them. We made sure to not scroll when opening them, but not when closing them, which caused some issues in rare cases.	6 years ago
Marcin Mikołajczak	2fb692ea45	i18n: Update Polish translation (#8901 ) Signed-off-by: Marcin Mikołajczak <me@m4sk.in>	6 years ago
Eugen Rochko	28401962ca	Change documentation URL (#8898 ) * Change documentation URL * Fix hardcoded documentation URL in locales	6 years ago
Masoud Abkenar	185cb2dc3a	RTL: fix margins of public-account-header__tabs (#8897 ) * RTL: fix margins of public-account-header__tabs * fix style * even more stylish code :)	6 years ago
Jeong Arm	144d73730d	Leave unknown language as nil if account is remote (#8861 ) * Force use language detector if account is remote * Set unknown remote toot's language as nil	6 years ago
Thibaut Girka	c6e4c48942	[Glitch] Add a confirmation dialog when hitting reply and the compose box isn't empty	6 years ago
ThibG	42aecb4c13	Add a confirmation dialog when hitting reply and the compose box isn't empty (#8893 ) * Add a confirmation dialog when hitting reply and the compose box isn't empty Fixes #878 * Performance improvement	6 years ago
Eugen Rochko	a46ab86adf	Limit the number of people that can be followed from one account (#8807 ) Configurable soft limit of 7,500, and above that, configurable ratio of 1.1 * followers, controlled by: - MAX_FOLLOWS_THRESHOLD - MAX_FOLLOWS_RATIO Fix #2311	6 years ago
Eugen Rochko	e645ae9561	Change admin accounts default sort to most recent (#8813 )	6 years ago
Eugen Rochko	7fe137d2f7	Fix link verification for remote accounts (#8868 )	6 years ago
ThibG	ba444797d2	Fix handling of ActivityPub activities lacking some attributes (#8864 )	6 years ago
Thibaut Girka	a9e8f98a9d	Make hidden media clickable in account media gallery	6 years ago
Thibaut Girka	d82c495c0f	Add media description (or status spoiler) in account media gallery	6 years ago
Thibaut Girka	bd1f08fa9a	Fix account gallery hidden media background color in mastodon-light	6 years ago
Thibaut Girka	eb85427576	[Glitch] Honour displayMedia setting in accountMedia gallery Inspired by `b79ab15859`	6 years ago
Thibaut Girka	6ad7606909	[Glitch] Add support for new display_media setting Port `f7a6f9489d` to glitch-soc [API] [vanilla required] [glitch-soc optional] initial_state show_sensitive_media boolean changed to show_media string with options "default", "hide_all", "show_all"	6 years ago
Thibaut Girka	15197a831c	[Glitch] RTL: fix margins: public-layout.header.nav-button Port `df2f4052b8` to glitch-soc	6 years ago
Thibaut Girka	884a898442	[Glitch] RTL: fix statubar action buttons/counter margins Port `9f6662fcc9` to glitch-soc	6 years ago
Thibaut Girka	36d426cec9	[Glitch] Separate font-family into variable Port `d0d65b5a28` to glitch-soc	6 years ago
Eugen Rochko	5d5d1b528e	Double the threshold for "read more" functionality (#8835 )	6 years ago
Spencer Alves	4e60a0d543	Add option to hide action bar in collapsed toots	6 years ago
Eugen Rochko	6c835085a3	Fix timeline pagination (#8827 ) Ruby's ** operator does not play well with non-Hash objects, which the params slice is Fix #8821	6 years ago
Masoud Abkenar	df2f4052b8	RTL: fix margins: public-layout.header.nav-button (#8823 ) * RTL: fix margins: public-layout.header.nav-button * add empty line to meet style guides	6 years ago
Thibaut Girka	86b2b009dd	Make pre-selection of usernames optional when replying to a toot Fixes #751	6 years ago
Thibaut Girka	15134beb1e	Fix styling issue in “Compose box options” local settings page	6 years ago
Thibaut Girka	9594c68532	Scroll to textarea when composing a toot	6 years ago

1 2 3 4 5 ...

5432 Commits (fac529975b2b97e4c57393560d3359a98f7b1953)