ae59b38203
Rip out the rest of htmlsanitizeex
5 years ago
77cfb08b8c
Remove commented-out code
5 years ago
08f6837065
Switch from HtmlSanitizeEx to FastSanitize
5 years ago
cf3041220a
Add support for `rel="ugc"`
5 years ago
ef43016b2c
Merge branch 'feature/custom-fields' into 'develop'
...
Add custom profile fields
See merge request pleroma/pleroma!1488
5 years ago
a6a814420d
html.ex: Allow sub and sup elements by default
...
Closes: https://git.pleroma.social/pleroma/pleroma/issues/1191
5 years ago
f7bbf99caa
Use info.fields instead of source_data for remote users
5 years ago
035368d363
Rich Media: Skip Microformats hashtags
...
When fixing this problem I incorrectly assumed a.hashtag is
the proper way for detecting hashtags, but it is just something Pleroma and
Mastodon add. Per microformats it should be detected by the presense of rel=tag.
This MR adds a check for rel=tag, but I still left a.hashtag just in case
5 years ago
d0ebc0edf3
Fix hashtags being picked up by rich media parser
...
Closes #989
5 years ago
99f70c7e20
Use Pleroma.Config everywhere
5 years ago
85b5c60694
Pleroma.Formatter: width/height to class=emoji
5 years ago
51e26f14f7
Remove redundant ensure_scrubbed_html
...
It is never used as handling for fake and non-fake activities was merged
into one function above it
5 years ago
85fa2fbce4
add scrubber for html special char
5 years ago
030a7876b4
Merge branch 'security/fix-html-class-scrubbing' into 'develop'
...
html: lock down allowed class attributes to only those related to microformats
See merge request pleroma/pleroma!1090
5 years ago
f5535e5743
html: lock down allowed class attributes to only those related to microformats
5 years ago
627e5a0a49
Merge branch 'develop' into feature/database-compaction
6 years ago
f0f30019e1
Refactor html caching functions to have a key instead of a module, use more correct terminology and fix summaries in mastoapi
6 years ago
975482f091
insert object defaults for fake activities and make credo happy
6 years ago
45ba10bf47
Fix the issue with HTML scrubber
6 years ago
4ed2618f6c
Allow 'rel' attribute on `<a>` link with specific values (for hashtag recognition).
6 years ago
fb82f6fc7c
[Credo] Remove parentesis on argument-less functions
6 years ago
381fe44172
HTML.Scrubber.Default: Consistency
6 years ago
2272934a5e
Stash
6 years ago
60ea29dfe6
Credo fixes: alias grouping/ordering
6 years ago
a2bb5d890d
html: don't attempt to parse nil content
6 years ago
ddb5545202
rich media: kill some testsuite noise
6 years ago
be9abb2cc5
html: add utility function to extract first URL from an object and cache the result
6 years ago
1ddab78247
html: allow microformats-related markup through the html filter
6 years ago
1e2d58982e
oopsies
6 years ago
846082e54f
Different caches based on the module. Remove scrubber version since it is not relevant anymore
6 years ago
980b5288ed
update copyright years to 2019
6 years ago
7e09c2bd7d
Move scrubber cache-related functions to Pleroma.HTML
6 years ago
c50353e6ae
shame on me for not testing after revert
6 years ago
3f9da55adc
Fix formating. Aparently my pre-commit hook broke.
6 years ago
62af23bd26
Revert some changes in html.ex
6 years ago
19f9889fbe
I am not sure what's going on anymore so I'll just commit and reset all the other files to HEAD
6 years ago
2791ce9a1f
add license boilerplate to pleroma core
6 years ago
baead4ea4b
fix markdown formatting
6 years ago
074fa790ba
fix compile warnings
6 years ago
194869c7db
added data attrs to twitter scrubber
6 years ago
3ccfe226c0
added data attrs for user and tag
6 years ago
5bb88fd174
Runtime configuration
...
Related to #85
Everything should now be configured at runtime, with the exception of
the `Pleroma.HTML` scrubbers (the scrubbers used can be
changed at runtime, but their configuration is compile-time) because
it's building a module with a macro.
6 years ago
795634c90f
Allow use of the `abbr` HTML tag.
6 years ago
8613db0e3b
html: ensure comments are correctly scrubbed
6 years ago
595d855f0e
html scrubbing policies: restrict img tags to http/https only for mediaproxy compatibility
6 years ago
2154c5dcd8
lib/pleroma/html.ex: Use macros for valid_schemes, change config for schemes
6 years ago
d7654c77de
lib/pleroma/html.ex: Use a function as a variable (broken for some reason)
6 years ago
50e0a9ae56
lib/pleroma/html.ex: Fix scheme lists
...
Gosh please don’t break ourselves…
Also this is copy-paste of the list in lib/pleroma/formatter.ex,
I think this should be put in a common variable, but where?
6 years ago
7f0e291483
html: twittertext: add missing catchall scrub function
6 years ago
8ae9424edb
html: default to using normal scrub policy if provided scrub policy is nil
6 years ago
rinpatch