Haelwenn (lanodan) Monnier
578a911737
admin_api_controller.ex: get_password_reset: fix params and response
6 years ago
Haelwenn (lanodan) Monnier
5732eef16b
lib/pleroma/web/admin_api/admin_api_controller.ex: Pleroma.Web.AdminAPI.Controller → Pleroma.Web.AdminAPI.AdminAPIController
6 years ago
Haelwenn (lanodan) Monnier
c8b8f1d32c
[Pleroma.Plugs.UserIsAdminPlug]: Check if admin is true instead of false, fix error reporting
6 years ago
Haelwenn (lanodan) Monnier
7076d45cb6
lib/pleroma/plugs/user_is_admin_plug.ex: Create
6 years ago
Haelwenn (lanodan) Monnier
77d2fd54dd
admin_api_controller: Have some basic code
6 years ago
Haelwenn (lanodan) Monnier
ee2e1328ad
admin_api_controller.ex: Create
6 years ago
William Pitcock
603fccf175
activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing
6 years ago
kaniini
05967472f2
Merge branch 'feature/uploader-mdii' into 'develop'
...
Feature / MDII Uploader
See merge request pleroma/pleroma!454
6 years ago
hakabahitoyo
59e079f641
fallbacking into local uploader
6 years ago
hakabahitoyo
8fd0556c78
better config reading
6 years ago
lain
f87b315618
TwitterAPI: Fix dm_timeline displaying only half of the conversation.
6 years ago
lambda
2f639ea129
Merge branch 'feature/pleromafe-usersearch' into 'develop'
...
Add Twitter / Pleroma API user search
See merge request pleroma/pleroma!452
6 years ago
William Pitcock
c07464607d
http security: remove form-action from CSP definitions
6 years ago
lain
e8d8c84f79
Add better test for user search functionlity.
6 years ago
hakabahitoyo
55abd8482e
better config
6 years ago
hakabahitoyo
52224de39f
better extension detection
6 years ago
hakabahitoyo
4fbfacf5e1
debug
6 years ago
hakabahitoyo
8e707aba29
format
6 years ago
Hakaba Hitoyo
ebe658c169
debuf
6 years ago
Hakaba Hitoyo
698cb3587c
omplement mdii uploader
6 years ago
Hakaba Hitoyo
58af0787be
add mdii uploader
6 years ago
lain
27aa136aac
Format.
6 years ago
lain
7b170cd616
Add Pleroma user search api for PleromaFE.
6 years ago
lambda
cc45797f4e
Merge branch 'fix-media-proxy-filename' into 'develop'
...
media_proxy: use path only to retrieve filename
See merge request pleroma/pleroma!450
6 years ago
kaniini
69d557e86d
Merge branch 'twitter-api-direct-messages' into 'develop'
...
Twitter api direct messages
See merge request pleroma/pleroma!449
6 years ago
href
f52a1d1ec5
media_proxy: use path only to retrieve filename
6 years ago
lain
ea9a776d7b
TwitterApi: Add direct message endpoint
6 years ago
lain
2cf40237ff
MastodonAPI: Add pagination to private messages.
6 years ago
href
9b553a1087
media_proxy: CSP, content-disposition
...
* Adds CSP headers to the media proxy endpoint
* Sends `content-disposition: attachment; …` for non-image/video/audio
content types
The default list can be overwritten with `:media_proxy,
:safe_content_types` in the configuration.
* Also now appends the filename to the proxy URL (fixes some mobile apps,
it was requested a while ago)
6 years ago
shibayashi
87c76a9a2f
Add __Host- prefix when secure flag is enabled
6 years ago
scarlett
0ce5623134
Merge branch 'twitter-api-null-display-name' into 'develop'
...
Twitter API: Fall back to user.nickname if user has no name
Closes #375
See merge request pleroma/pleroma!444
6 years ago
scarlett
cb6fd73861
Twitter API: Fall back to user.nickname if user has no name
6 years ago
kaniini
54923c2e55
Merge branch 'feature/csp-plug' into 'develop'
...
migrate CSP management to CSPPlug
See merge request pleroma/pleroma!441
6 years ago
William Pitcock
ee5932a504
http security: allow referrer-policy to be configured
6 years ago
William Pitcock
fe67665e19
rename CSPPlug to HTTPSecurityPlug.
6 years ago
KokaKiwi
1592fa2bea
Mastodon API: Fix list streaming
6 years ago
William Pitcock
df72978dce
csp plug: add support for certificate transparency
6 years ago
William Pitcock
331cf6ada1
csp plug: add sts support
6 years ago
William Pitcock
f516e317ea
plugs: add CSPPlug
6 years ago
William Pitcock
419ed3a0ca
oauth: fix token decode regression
6 years ago
William Pitcock
97e50f3191
activitypub: transmogrifier: sanitize internal representation details from outgoing objects
...
this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside
projects which tried to parse our internal data. accordingly, it seems better to just remove
it.
6 years ago
William Pitcock
f8310114a6
activitypub: object view: sanitize both the activity and the object when an activity is given for rendering
6 years ago
kaniini
c9c1f9dee2
Merge branch 'bugfix/ostatus-as2-reflection' into 'develop'
...
ostatus: only federate activities concerning note objects
See merge request pleroma/pleroma!437
6 years ago
kaniini
7daa102fa4
Merge branch 'bugfix/local-jsonld-context' into 'develop'
...
Host LitePub JSON-LD context locally
See merge request pleroma/pleroma!435
6 years ago
William Pitcock
4f87b8362b
endpoint: move CORSPlug in front of Plug.Static
6 years ago
William Pitcock
03a9990baf
endpoint: fix formatting
6 years ago
William Pitcock
e6d246882d
federator: don't federate anything other than Note objects to OStatus
6 years ago
William Pitcock
e4971553c7
activitypub: utils: use same object type list for mention extraction as insertion
6 years ago
William Pitcock
b3c360ce2c
notification: add fallback get_notified_from_activity()
6 years ago
William Pitcock
b9871e7e5a
activitypub: utils: wrap Note objects in a Create when extracting mentions
6 years ago