ebe658c169
debuf
6 years ago
698cb3587c
omplement mdii uploader
6 years ago
58af0787be
add mdii uploader
6 years ago
27aa136aac
Format.
6 years ago
7b170cd616
Add Pleroma user search api for PleromaFE.
6 years ago
cc45797f4e
Merge branch 'fix-media-proxy-filename' into 'develop'
...
media_proxy: use path only to retrieve filename
See merge request pleroma/pleroma!450
6 years ago
69d557e86d
Merge branch 'twitter-api-direct-messages' into 'develop'
...
Twitter api direct messages
See merge request pleroma/pleroma!449
6 years ago
f52a1d1ec5
media_proxy: use path only to retrieve filename
6 years ago
ea9a776d7b
TwitterApi: Add direct message endpoint
6 years ago
2cf40237ff
MastodonAPI: Add pagination to private messages.
6 years ago
9b553a1087
media_proxy: CSP, content-disposition
...
* Adds CSP headers to the media proxy endpoint
* Sends `content-disposition: attachment; …` for non-image/video/audio
content types
The default list can be overwritten with `:media_proxy,
:safe_content_types` in the configuration.
* Also now appends the filename to the proxy URL (fixes some mobile apps,
it was requested a while ago)
6 years ago
87c76a9a2f
Add __Host- prefix when secure flag is enabled
6 years ago
0ce5623134
Merge branch 'twitter-api-null-display-name' into 'develop'
...
Twitter API: Fall back to user.nickname if user has no name
Closes #375
See merge request pleroma/pleroma!444
6 years ago
cb6fd73861
Twitter API: Fall back to user.nickname if user has no name
6 years ago
54923c2e55
Merge branch 'feature/csp-plug' into 'develop'
...
migrate CSP management to CSPPlug
See merge request pleroma/pleroma!441
6 years ago
ee5932a504
http security: allow referrer-policy to be configured
6 years ago
fe67665e19
rename CSPPlug to HTTPSecurityPlug.
6 years ago
1592fa2bea
Mastodon API: Fix list streaming
6 years ago
df72978dce
csp plug: add support for certificate transparency
6 years ago
331cf6ada1
csp plug: add sts support
6 years ago
f516e317ea
plugs: add CSPPlug
6 years ago
419ed3a0ca
oauth: fix token decode regression
6 years ago
97e50f3191
activitypub: transmogrifier: sanitize internal representation details from outgoing objects
...
this causes JSON-LD parsers to get upset and has also lead to developer confusion from outside
projects which tried to parse our internal data. accordingly, it seems better to just remove
it.
6 years ago
f8310114a6
activitypub: object view: sanitize both the activity and the object when an activity is given for rendering
6 years ago
c9c1f9dee2
Merge branch 'bugfix/ostatus-as2-reflection' into 'develop'
...
ostatus: only federate activities concerning note objects
See merge request pleroma/pleroma!437
6 years ago
7daa102fa4
Merge branch 'bugfix/local-jsonld-context' into 'develop'
...
Host LitePub JSON-LD context locally
See merge request pleroma/pleroma!435
6 years ago
4f87b8362b
endpoint: move CORSPlug in front of Plug.Static
6 years ago
03a9990baf
endpoint: fix formatting
6 years ago
e6d246882d
federator: don't federate anything other than Note objects to OStatus
6 years ago
e4971553c7
activitypub: utils: use same object type list for mention extraction as insertion
6 years ago
b3c360ce2c
notification: add fallback get_notified_from_activity()
6 years ago
b9871e7e5a
activitypub: utils: wrap Note objects in a Create when extracting mentions
6 years ago
8c805ada32
user: remove obsolete User.get_notified_from_activity().
6 years ago
6cadfcb21e
activitypub: utils: switch to using new Notification.get_notified_from_activity().
6 years ago
cdfdd77e30
notification: implement new Notification.get_notified_from_activity()
6 years ago
d26cd6c1bf
user: factor out user set fetching from User.get_notified_from_activity()
6 years ago
81d6ca1783
user: implement AS2 mention extraction + unify Announce handling
6 years ago
6b4064fa5d
activitypub: transmogrifier: unify mention extraction
6 years ago
0a2c1a3419
user: add optional local_only param to get_notified_from_activity()
6 years ago
2fab32ab61
Pleroma.Web.Endpoint: Whitelist schemas directory
6 years ago
934125695d
Move /litepub-1.0.jsonld to /schemas/litepub-0.1.jsonld
6 years ago
4e93d6ae14
common api: utils: flip to/cc for mentions
6 years ago
3e33479c05
activitypub: transmogrifier: only consider `to` users as mention targets
6 years ago
144dc048b8
user: only consider `to` recipients as mention targets
6 years ago
abcacec97d
Pleroma.Web.ActivityPub.Utils: Use locally-served JSON-LD Litepub context instead of Github-hosted one
6 years ago
da16ada424
utils: use litepub @context instead of that huge mess
6 years ago
f733470037
user view: unify a @context entry that was missed
6 years ago
59cf7cf235
Merge branch 'small-jsonld-refactor' into 'develop'
...
Small jsonld refactor
See merge request pleroma/pleroma!433
6 years ago
34bd411781
Unify json ld header handling.
6 years ago
3b02fd9fb7
Small refactor.
6 years ago
4d627a5117
Merge branch 'feature/qvitter-notifications-dismiss' into 'develop'
...
qvitter notifications: add new "read notifications" API
See merge request pleroma/pleroma!431
6 years ago
b451a92d78
Merge branch 'runtime-config' into 'develop'
...
Runtime configuration
See merge request pleroma/pleroma!430
6 years ago
e42f2efae4
/api/v1/accounts/relationships Return an empty array if no id in params
...
This copies Mastodon API behaviour & fixes Mastalab app.
6 years ago
9070588493
Runtime config: MRF changes
6 years ago
b2105a3131
twitterapi: add notification read endpoint
6 years ago
f16c2e0b1b
notification: add Notification.set_read_up_to()
6 years ago
5bb88fd174
Runtime configuration
...
Related to #85
Everything should now be configured at runtime, with the exception of
the `Pleroma.HTML` scrubbers (the scrubbers used can be
changed at runtime, but their configuration is compile-time) because
it's building a module with a macro.
6 years ago
a68c18f0ad
Merge branch 'unify-mastodon-oauth' into 'develop'
...
Unify Mastodon Login with OAuth login.
See merge request pleroma/pleroma!429
6 years ago
0f3e78addb
Merge branch 'runtime-router' into 'develop'
...
Runtime configured router
See merge request pleroma/pleroma!426
6 years ago
a8f1e30cb8
Formatting.
6 years ago
7d328c658d
Small wrapper module around Application.get_env/put_env
...
Same API as the old Pleroma.Config
6 years ago
4f640c43ed
Unify Mastodon Login with OAuth login.
...
This removes duplication in the login code.
6 years ago
2bc924ba45
Get rid of Pleroma.Config in favor of Application
...
Discussed in https://git.pleroma.social/pleroma/pleroma/merge_requests/426#note_7232
6 years ago
013f7ba8c1
Add federating plug & public tests
6 years ago
83911b1443
Fix wrong return when finmoji is disabled
6 years ago
fd0e7d18d9
handle_continue is OTP21+
6 years ago
6fe23c5458
Runtime configured router
6 years ago
d096bc17bf
revert endpoint position in supervision tree
6 years ago
763fc7b44f
Runtime configured emojis
...
The changes are a bit heavy since the emojis were loaded into module
attributes from filesystem.
This introduces a GenServer using an ETS table to cache in memory the
emojis, and allows a runtime-reload with `Pleroma.Emoji.reload()`.
6 years ago
007f1c73b1
Merge branch 'feature/cors-again' into 'develop'
...
Add CORSPlug to make web-based OAuth easier.
See merge request pleroma/pleroma!420
6 years ago
3e50bb667f
Pleroma.Web.MastodonAPI.StatusView: Content isn’t nullable
6 years ago
e954cfcc2c
Add CORSPlug to make web-based OAuth easier.
6 years ago
4bcdbb12a4
Merge branch 'fix_hashtag_search' into 'develop'
...
Fix hashtag search
See merge request pleroma/pleroma!418
6 years ago
0cca7edbe0
Fix hashtag search
...
When we lowercase the search it will succesfully do a case insenstive
match. Now #Linux will match #linux and #LINUX whereas previously it
would only match the exact case.
6 years ago
45ebc8dd9a
Check for empty string in_reply_to ids.
6 years ago
3c7d4ff271
Pleroma.Web.TwitterAPI.ActivityView: Harden TwitterAPI against remnant of prismo
6 years ago
24ba08de13
twitter api: add support for rendering Page objects
6 years ago
4d8f076125
mastodon api: add support for rendering Page objects
6 years ago
9f03b5c4f7
activitypub: transmogrifier: add support for Page objects
6 years ago
585b29337c
Ensure filters have a filter_id
6 years ago
eba9a62024
Merge branch 'feature/relay-tests' into 'develop'
...
relay tests
See merge request pleroma/pleroma!411
6 years ago
40676d7683
Merge branch 'bugfix/prismo.news_article_url' into 'develop'
...
Bugfix/prismo.news article url
Closes #352
See merge request pleroma/pleroma!410
6 years ago
1e9ced5af4
Test Relay, switch to runtime configuration.
6 years ago
e6ec01afb6
Start configuration manager.
6 years ago
9b77030d3c
Add basic configuration management module.
6 years ago
b2da5262ea
Pleroma.Web.ActivityPub.Transmogrifier: fix_url when not a string/empty
...
Thanks prismo.news, I hate it
6 years ago
755f166406
Pleroma.Web.MastodonAPI.StatusView: Do not fail when URL isn’t a string
6 years ago
2b3a40d038
object: split object_cache from user_cache
6 years ago
f584a603f9
user: make User.delete() return data consistent with Object.delete()
6 years ago
2c3bfd7f76
user: delete user_info data in User.invalidate_cache()
6 years ago
10f3958468
object: return the deleted object as well
6 years ago
2bf358d7b4
activitypub: use Object.delete() instead of mutating the database and cache directly
6 years ago
c4e43da63e
object: add safe object deletion function
6 years ago
558e6a84d6
[Pleroma.Web.CommonAPI]: Delete post cache entry when it’s deleted
...
Closes: https://git.pleroma.social/pleroma/pleroma/issues/346
6 years ago
47f76bf4b1
common api: allow self-liking objects
...
mastodon allows this, for whatever reason.
closes #347 .
6 years ago
5fea3d9eca
Merge branch 'allow-abbr' into 'develop'
...
Allow use of the `abbr` HTML tag.
See merge request pleroma/pleroma!405
6 years ago
795634c90f
Allow use of the `abbr` HTML tag.
6 years ago
b92e38d2d4
Add user reactivation task.
6 years ago
a880e0a527
Merge branch 'feature/upload-limits' into 'develop'
...
configurable media upload limits
Closes #118
See merge request pleroma/pleroma!401
6 years ago
676c97b8c7
nodeinfo: expose configured upload limits
6 years ago
36825932eb
s3 uploader: add new feature to force public attachment URIs to go through media proxy
6 years ago
f407831120
common api: prefer formatting attachments using the attachment's name instead of URI
6 years ago
784b3a615d
utils: fix another possible leak with private S3 backends using mediaproxy
...
same rationale as the other mediaproxy changes
6 years ago
181f3bb56a
mastodon api: enforce upload limits for avatars and banners
6 years ago
e12489e2fe
twitter api: enforce upload limits for avatars, banners and backgrounds
6 years ago
167d3789a5
activitypub: upload: pass through an upload limit if one is provided
6 years ago
fa483cd7c2
upload: add new optional argument designating an upload size limit
6 years ago
5c6ec2d9fc
twitter/mastodon api: always use mediaproxy URLs in attachments
...
if using local media, the mediaproxy will not replace the URL anyway.
6 years ago
72ea54de6e
activitypub: fix possible false positives with broken thread filtering
6 years ago
44762daf51
Merge branch 'feature/broken-thread-filtering' into 'develop'
...
broken thread filtering, part 1
See merge request pleroma/pleroma!394
6 years ago
c302c619b9
http: fix mediaproxy
6 years ago
26eb11c172
activitypub: add support for filtering broken threads out of timelines
6 years ago
7338368ad9
http: enable keepalive / connection pooling ( closes #336 )
6 years ago
f6cb963df2
activitypub utils: fix recipient check when the message is unaddressed (mastodon)
6 years ago
7906dfe5a0
[Pleroma.Web.Nodeinfo.NodeinfoController]: Simplify features strings
6 years ago
57330dd91b
[Pleroma.Web.Nodeinfo.NodeinfoController]: Have a list of supported features
6 years ago
9fe9c09883
Merge branch 'finmoji-optional' into 'develop'
...
Make finmoji optional
See merge request pleroma/pleroma!391
6 years ago
ae5beb7b64
Make finmoji optional
6 years ago
ce70eb8c00
activitypub utils: fix user splicing
6 years ago
2f1f1a4f30
activitypub: splice users into recipient lists when they receive messages at their personal inbox
...
closes #343
6 years ago
9e9b1bd5ea
Merge branch 'bugfix/ap-uri-user-search' into 'develop'
...
transmogrifier: do not try to contain origin of something which doesn't have one
Closes #340
See merge request pleroma/pleroma!389
6 years ago
79b1e4465f
Merge branch 'bugfix/233-handle-missing-StatusView' into 'develop'
...
[Pleroma.Web.MastodonAPI.StatusView]: Add fallback on missing handler for status.json
Closes #233
See merge request pleroma/pleroma!257
6 years ago
5383887bd4
transmogrifier: do not try to contain origin of something which doesn't have one
6 years ago
b386888a0e
[Pleroma.Web.MastodonAPI.MastodonAPIController]: fallback for try_render/4
...
Better be sure than sorry
6 years ago
1ed25c963a
twitterapi: activity view: add the other in_reply_to fields
6 years ago
1b480e3514
user: add helper for fetching profile url (which may be different than ap id)
6 years ago
b112112c11
[Pleroma.Web.MastodonAPI.MastodonAPIController]: Wrap around render/4
6 years ago
b0a940d5a2
[Pleroma.Web.MastodonAPI.StatusView]: Remove unused arguments
6 years ago
2da0ffeb28
lib/pleroma/web/mastodon_api/mastodon_api_controller.ex: Output an error when render(status.json) gives a nil
6 years ago
0c10be8731
[Pleroma.Web.MastodonAPI.StatusView]: Remove nils from lists.json
6 years ago
3b0e9287a5
[Pleroma.Web.MastodonAPI.StatusView]: Return nil as fallback for missing views
6 years ago
fee43ae5e7
twitterapi: activity view: implement in_reply_to_screen_name using the new graph walking helper
6 years ago
f3f736afc4
activity: add helper to fetch an activity's parent
6 years ago
945ce9910d
Merge branch 'bugfix/html-scrub-comments' into 'develop'
...
html: ensure comments are correctly scrubbed
See merge request pleroma/pleroma!384
6 years ago
8613db0e3b
html: ensure comments are correctly scrubbed
6 years ago
a253c1466e
New frontend options
6 years ago
a249cbf187
Add a test for List.get_lists_account_belongs
6 years ago
e8c698af41
Add an endpoint /api/v1/accounts/:id/lists to get lists to which account belongs
6 years ago
ad3181895c
Merge branch 'bugfix/html-scrub-schemes' into 'develop'
...
lib/pleroma/html.ex: Fix scheme lists
See merge request pleroma/pleroma!377
6 years ago
595d855f0e
html scrubbing policies: restrict img tags to http/https only for mediaproxy compatibility
6 years ago
2154c5dcd8
lib/pleroma/html.ex: Use macros for valid_schemes, change config for schemes
6 years ago
582dbe5c8d
formatter: fix matching osada users
6 years ago
7562912f6a
Use maybe_direct_follow for follow imports
6 years ago
d7654c77de
lib/pleroma/html.ex: Use a function as a variable (broken for some reason)
6 years ago
50e0a9ae56
lib/pleroma/html.ex: Fix scheme lists
...
Gosh please don’t break ourselves…
Also this is copy-paste of the list in lib/pleroma/formatter.ex,
I think this should be put in a common variable, but where?
6 years ago
30efa86c05
common api: enable tag linking in markdown mode
6 years ago
eacab0fb05
Delete Tokens and Authorizations on password change
...
Closes: https://git.pleroma.social/pleroma/pleroma/issues/320
6 years ago
51eaece3ea
user: break out local cases for maybe_direct_follow
6 years ago
2c29329d39
user: local users are always AP-enabled ( closes #316 )
6 years ago
111841ad34
common api: take the combination of the subject and content for length limit enforcement
...
closes #315
6 years ago
08d5ad71b6
nodeinfo: allow opting out of MRF transparency
6 years ago
7b3fff9af8
{mastodon api, twitter api}: make the follow handshake timeout configurable
6 years ago
7f530f6f80
mastodon api: relationship view: better handle no pre-existing follow activity
6 years ago
e69faf550c
user: add wait_and_refresh() for async three-way handshake case
6 years ago
3e751496e3
mastodon api: account view: fetch follow state and use it to populate `requested` field
6 years ago
a71b822013
activitypub: always track following state for async reasons
6 years ago
8ce217776d
activitypub transmogrifier: better manage follow state
6 years ago
4f7a468659
user: only pre-create follow relationships on OStatus
...
closes #306
6 years ago
bd76d9cee6
nodeinfo: add accepted post formats to metadata
6 years ago
285ac80c36
config: allow for accepted post formats to be configured
6 years ago
52b05137c5
formatter: use Pleroma.HTML module instead of HtmlSanitizeEx directly
6 years ago
16307da311
twitterapi: frontend config: add formattingOptionsEnabled
6 years ago
b1be9415ef
Revert "Merge branch 'revert-a26d5e6b' into 'develop'"
...
This reverts commit d31bbb1cfe340ab3cb90
6 years ago
f2efc8dcfb
nodeinfo_controller: Fix JSON rendering
...
This is the last noedinfo difference from my own branch
6 years ago
28651df478
MRF Transparency
6 years ago
56d31db130
Pleroma.Web.Nodeinfo.NodeinfoController: Further transparency, breaks API of previous one
6 years ago
8226953f1d
[Pleroma.Web.Nodeinfo.NodeinfoController]: Transparency on MRF Simple
6 years ago
4f03bb2299
Merge branch 'bugfix/fix-mrf-reject-match' into 'develop'
...
activitypub: fix error condition match
See merge request pleroma/pleroma!365
6 years ago
4db1bc2c0e
activitypub: fix error condition match
6 years ago
a3cffd3566
formatter: Stop using phoenix HTML and format it ourselves
...
* Pheonix has an extra scheme whitelist conflicting with ours
* Pheonix doesn’t seems to do URL encoding, just HTML encoding
Closes: https://git.pleroma.social/pleroma/pleroma/issues/307
6 years ago
34b6d444d6
Merge branch 'feature/twitter_api/fields' into 'develop'
...
[Pleroma.Web.TwitterAPI.UserView]: Add mastodon-fields in "fields"
See merge request pleroma/pleroma!360
6 years ago
82b57ebad1
[Pleroma.Web.TwitterAPI.UserView]: Add mastodon-fields in "fields"
6 years ago
707077edde
activitypub: don't fall back to OStatus fetching when MRF rejects an object
6 years ago
5c312ad677
activitypub inbox: only accept unsigned/invalid-signature relayed creates, nothing else
...
although the previous handling assumed any unsigned/invalid signature message was a Create,
lets make it more explicit
6 years ago
c739737998
transmogrifier: get_actor called without casting attributedTo in actor and actor is nil
6 years ago
9446b02bdf
transmogrifier: Just make attachement maps into a list and reroll
6 years ago
e53da692fb
transmogrifier: Use the correct variable and prefer inspect in case of a bad type being passed on
6 years ago
d830a243a3
transmogrifier: more robustly handle dereferencing pointer URIs
6 years ago
4c3a80de96
transmogrifier: Use oneliners when applicable
6 years ago
ed8dfa3029
transmogrifier: reformat `cond` block by hand
6 years ago
eebe33e86a
transmogrifier: Add support for array-less hashtags, add broken announce, harden get_actor
6 years ago
f3291acc91
transmogrifier: pro-actively add support for Hashtag without array in tag
6 years ago
22927f3a34
transmogrifier: Use a cond, add proactive support for arrays
6 years ago
0aac72f1d3
[Pleroma.Web.ActivityPub.Transmogrifier]: quick fix when tag is a Map
6 years ago
28e8a8ab36
[Pleroma.Web.ActivityPub.Transmogrifier]: fix emoji in tag when it’s not in a array [kroeg]
...
Also simplified the code for name trimming.
And not copying the Map.merge part as it looks buggy.
See: https://queer.hacktivis.me/objects/a9f21ebc-9a12-4a6c-89d5-3d46955c6ee8
6 years ago
f8a0cb9c0b
[Pleroma.Web.ActivityPub.Transmogrifier]: fix when attachment contain is just a Map [kroeg]
6 years ago
a4abb124ea
[Pleroma.Web.ActivityPub.Transmogrifier]: Fix when inReplyTo is a inlined post [kroeg]
6 years ago
523757be52
[Pleroma.Web.ActivityPub.ActivityPub]: Harden getting endpoints [kroeg]
6 years ago
f77ec96707
Uploaders.S3: Replace unsafe characters in object key
...
According to [the S3 docs][s3], the characters safe for use in object keys are:
* 0-9
* a-z
* A-Z
* !
* -
* _
* .
* *
* '
* (
* )
(The / character is not listed but mentioned being safe outside of the list.)
Several characters that are valid in filenames can cause problems, for example
spaces are not valid in URLs and need to be escaped,
sequences of spaces can become squeezed by S3,
some characters like \ are documented to require “significant special handling”.
To avoid these problems, this change encodes the filename
before using it as part of the S3 object name
by replacing all characters except those documented as “safe” with dashes.
[s3]: https://docs.aws.amazon.com/AmazonS3/latest/dev/UsingMetadata.html
6 years ago
d94ee5cd50
Mastodon API: Support push subscription CRUD
6 years ago
c2d592c9c5
Assign token to connection
6 years ago
7f0e291483
html: twittertext: add missing catchall scrub function
6 years ago
56577d8b48
twitter api: add no_rich_text option to userview for account prefs
6 years ago
df00a364fb
mastodon api: formatting
6 years ago
c2b69798dd
twitter api: add support for disabling rich text
6 years ago
958e085acb
mastodon api: add support for user-supplied html policy
6 years ago
2f5b026548
twitter api: add support for user-specified html policy
6 years ago
735cdfb848
user: add User.html_filter_policy()
6 years ago
8ae9424edb
html: default to using normal scrub policy if provided scrub policy is nil
6 years ago
4cb6331843
Merge branch 'feature/dynamic-user-refresh' into 'develop'
...
user: implement dynamic refresh of profiles
See merge request pleroma/pleroma!350
6 years ago
0fe165165f
Merge branch 'task-204-on-options-request' into 'develop'
...
Return 204 response on options request
See merge request pleroma/pleroma!347
6 years ago
c9f6eb9a41
user: implement dynamic refresh of profiles (gets rid of need for fix_ap_users task)
6 years ago
40c51f118f
[Pleroma.Web.MastodonAPI.MastodonAPIController]: Bump mastodon_api_level to 2.5.0
6 years ago
f74725df41
[Pleroma.Web.MastodonAPI.MastodonAPIController]: Remove unused variables
6 years ago
33a1e92584
[Pleroma.Web.Router]: Fake /api/v1/endorsements
6 years ago
a8eaecadee
[Pleroma.Web.MastodonAPI.AccountView]: relationship.json: fake endorsed value (false)
6 years ago
43d0b7bf7a
[Pleroma.Web.MastodonAPI.StatusView] add replies_count
6 years ago
c9585ec007
twitter api: fix mimetype fallback when attachments use a URI instead of a URL object
6 years ago
0cac493fdc
mastodon api: default attachment type to image if one is not present
6 years ago
f4fcea5258
Revert "Mastodon API: Fake support for loading filters"
...
This reverts commit c1d07da4e16e030129fb
6 years ago
9b0f2d572b
Return 204 response on options request
6 years ago
a7d0ecdc7c
html: add policy which transforms inline images to pass through the media proxy
6 years ago
cd13fa17fd
html: allow scrubbing policies to be stackable
6 years ago
342ed84446
MRF: add policy for normalizing HTML markup (local and remote) to a specific policy
6 years ago
95376ac1fe
html: add the ability to override the default scrub policy
6 years ago
c2650f0ffb
Merge branch 'feature/html-scrub-policy' into 'develop'
...
html scrub policy
See merge request pleroma/pleroma!339
6 years ago
39aed5348a
Add visible_in_picker to status emojis
6 years ago
d3248e13e3
activitypub: transmogrifier: allow profile updates from bots
6 years ago
e0b8c0ccba
MRF: reject non-public: use pattern match to remove unnecessary if block
6 years ago
88094c266d
MRF: simple policy: refactor module to use guards and pattern matching
6 years ago
97253df3ee
MRF: simple policy: contain media removal/nsfw ops to create activities only
6 years ago
e82ce2a4b3
formatting
6 years ago
358f88e10a
html: allow inline images by default (because of custom emoji)
6 years ago
40e2f6e500
html: add default scrubbing profile and configuration knobs
6 years ago
ac486fc59b
everywhere: use Pleroma.HTML module instead of HtmlSanitizeEx directly
6 years ago
255f46d7ab
html: new module providing a configurable markup scrubbing policy
6 years ago
801d645c6b
TASK: Fix formatting
6 years ago
b79c126ee0
Add missing URL encoding in create authorization redirect
6 years ago
4e1bb7bccb
make limit for /api/v1/suggestions
6 years ago
045953225e
Merge branch 'moonman/pleroma-sha512-crypt' into 'develop'
...
auth overhaul and legacy GS auth
See merge request pleroma/pleroma!331
6 years ago
530561a091
Merge branch 'add-secure-and-samesite-cookie-flags' into 'develop'
...
Add Secure and SameSite cookie flags
See merge request pleroma/pleroma!302
6 years ago
3e4f39116b
Merge branch 'feature/custom_media_url' into 'develop'
...
[Pleroma.Uploaders.Local]: Add configuration for custom url path
See merge request pleroma/pleroma!318
6 years ago
c1d07da4e1
Mastodon API: Fake support for loading filters
6 years ago
619f67768a
Mastodon API: Add unsupported attributes to relationship responses
...
These attributes are documented as required by the Mastodon API.
Since we don’t support them (I think?), respond with default values.
6 years ago
70163aec9b
Add LegacyAuthenticationPlug to router.
6 years ago
44b094908c
Update legacy passwords automatically.
6 years ago
3aba585e7a
Add Plugs to router.
6 years ago
e601165426
Add UserEnabledPlug.
6 years ago
5ce1ebb179
Add SetUserSessionIdPlug.
6 years ago
4a3dbd9d4e
Merge branch 'fix/sign-in-with-toot' into 'develop'
...
Fix sign-in and sign-out with Toot!
See merge request pleroma/pleroma!306
6 years ago
636ad3e155
Add new plugs to router.
6 years ago
12bc73dd28
Add EnsureUserKeyPlug, smaller fixes
6 years ago
32465b9939
Simplify AuthenticationPlug
6 years ago
9a96c93be7
Add SessionAuthenticationPlug.
6 years ago
a3f54fca4d
Add LegacyAuthenticationPlug
6 years ago
3cf17dc402
Add EnsureAuthenticatedPlug
6 years ago
faf5347748
Add UserFetcherPlug.
6 years ago
42bd985e66
Add BasicAuthDecoderPlug
6 years ago
8b020e03a6
change cond to if else
6 years ago
1a8bc26e52
auth against sha512-crypt password hashes, upgrade to pbkdf2
6 years ago
76c67a41c1
Merge branch 'develop' into 'feature/staff-discovery-api'
...
# Conflicts:
# lib/pleroma/web/nodeinfo/nodeinfo_controller.ex
6 years ago
9a21ff5f61
nodeinfo: add staffAccounts field to metadata
6 years ago
1c9e539b47
Merge branch 'feature/mastodon_api_2.4.x' into 'develop'
...
Add/Fix Mastodon endpoints for 2.4.3 compatibility
See merge request pleroma/pleroma!266
6 years ago
b1124f1605
report chat and gopher support at /nodeinfo/2.0.json
6 years ago
b61430163b
user: add moderator_user_query()
6 years ago
7ca2a2ddea
Merge branch 'nil-bio-emojis' into 'develop'
...
add nil clause for Formatter.get_emoji/1 to return an empty result
Closes #274
See merge request pleroma/pleroma!315
6 years ago
35515cfa66
Update mastodon_api_controller.ex
6 years ago
26f8697400
Update mastodon_api_controller.ex
6 years ago
2b2bd0e047
Render notification IDs as strings, not numbers
6 years ago
4257f784bc
sloop around get_emoji/1 to check is_binary and have a fallthrough
...
default that returns empty
6 years ago
754deb26dd
[Pleroma.Uploaders.Local]: Add configuration for custom url path
...
One use-case being an external caching proxy
6 years ago
b7923aa304
Merge branch 'hotfix_broken_likes' into 'develop'
...
hotfix for broken like completely breaking the notifications API
See merge request pleroma/pleroma!284
6 years ago
834515fb51
formatter: don't add XSS emoji
6 years ago
3c7280934e
Merge branch 'security/activitypub-spoofing' into 'develop'
...
security: activitypub spoofing
See merge request pleroma/pleroma!321
6 years ago
03e92977cb
transmogrifier: fix peertube/plume actor handling
6 years ago
0b2c051a04
activitypub: fix possibility of spoofing by containing remote objects to the same domain as their actor
6 years ago
e2ce0e9e05
run `mix format`.
6 years ago
84d84e4ca4
OAuth: Support /revoke endpoint for revoking tokens
...
(for compatibility with Mastodon)
6 years ago
ad2a7972e7
OAuth: Set `created_at` in token exchange response
...
(for compatibility with Mastodon)
6 years ago
b60d232719
AccountView: `sensitive` is supposed to be a boolean, not a string
6 years ago
c921d99898
config: add ability to disable Pleroma FE config management ( closes #276 )
6 years ago
2e2f458705
Merge branch 'lanodan/code-dup_in_mastoapi_search' into 'develop'
...
Clean code duplication in MastoAPI search(v1/v2)
See merge request pleroma/pleroma!316
6 years ago
0c2a0e3551
Specify default scope in verify_credentials
...
Certain Mastodon/Pleroma front ends call verify_credentials to get the
default scope of a new toot.
Currently, Pleroma hardcodes this value to "public".
This patch changes it to the user's default_scope value.
6 years ago
8885d16e1b
[Pleroma.Web.MastodonAPI.MastodonAPIController].search(2)?: Remove code duplication
6 years ago
a9c0f395cb
add nil clause for Formatter.get_emoji/1 to return an empty result
6 years ago
58539e1357
Revert "Merge branch 'feature/rich-text' into 'develop'"
...
This reverts merge request !309
6 years ago
856b5e1ca4
config: chase pleroma-fe updates from MR pleroma-fe!324.
6 years ago
a26d5e6b2a
Merge branch 'feature/rich-text' into 'develop'
...
rich text support
See merge request pleroma/pleroma!309
6 years ago
6aa65b68b8
common api: add support for formatting messages outside of twitter-style plain text
6 years ago
e838969495
Merge branch 'use-media-proxy-in-suggestions-api' into 'develop'
...
use media proxy for the suggestions api
See merge request pleroma/pleroma!305
6 years ago
65e8d47cfb
Merge branch 'backendhack' into 'develop'
...
Flexible Storage Backends
See merge request pleroma/pleroma!304
6 years ago
adffad5502
increase uploader behaviour documentation accuracy.
6 years ago
af01f0196a
Add backend failure handling with :ok | :error so the uploader can handle it.
...
defaulting to :ok, since that's the currently level of error handling.
6 years ago
29b5e30c46
activity: drop recipients_to/recipients_cc fields
6 years ago
de9acebbf3
activitypub: use jsonb query for containment instead of recipients_to/recipients_cc.
6 years ago
ddc6f32b75
Fix Mastodon API when actor's nickname is null
6 years ago
cce9d008f9
streamer: contain list updates in the same way as we do with the database query
6 years ago
ded9091206
mastodon api: use bounded AP object graph query to enforce containment of private statuses
6 years ago
643fae6e36
activitypub: allow querying the activity/object graph bounded to a specific to/cc set
6 years ago
81673b8136
activity: add recipients_to and recipients_cc fields
6 years ago
2ff25ac0ce
A hobbldey-working swift client.
...
apparently, all elixir openstack libraries are trash
luckily, the APIs are stupid easy.
6 years ago
9fc20ed572
works now, tested with profile photo upload on local backend.
6 years ago
dad39b24a1
add the behaviour, work on actually making it work.
6 years ago
18ad8aaecf
Explicitly set 'http_only' to true
6 years ago
8d2d7a8859
Implement uploader behaviour
...
run formatter <#
6 years ago
4656a07e9e
Set SameSite flag to 'Strict'
6 years ago
6cbfb5ab5d
use media proxy for suggestions api
6 years ago
0df558a6a5
cleaning up a bit.
6 years ago
709816a0f8
example of flexible storage backends
6 years ago
d22f66655b
upload: formatting
6 years ago
1596185ac6
upload: add the S3 support itself
6 years ago
86c007ddd2
upload: strip exif data before finalizing the file path
6 years ago
0c4493f144
Fix formatting
6 years ago
b9a642da1e
Add Secure and SameSite cookie flags
6 years ago
0f1c629d65
better solution, added test.
6 years ago
6973b77e94
[Pleroma.Web.MastodonAPI.FilterView] fix expires_at being a unsafe variable
6 years ago
9bddb39ff0
[Pleroma.Web.MastodonAPI.FilterView]: expires_at should be null when N/A
6 years ago
d571a571fe
[Pleroma.Web.MastodonAPI.MastodonAPIController]: Bump mastodon_api_level to 2.4.3
6 years ago
6e030129fb
[MastodonAPI] Add filters
6 years ago
a5adb251ab
[Pleroma.Web.MastodonAPI.AccountView]: Add fields support
6 years ago
d008f2d69c
[Pleroma.Web.MastodonAPI.AccountView]: Add bot field
6 years ago
97e20d2932
[MastodonAPI] the tag field isn’t fixed to a static type in pleroma
6 years ago
83efaa3af6
[MastodonAPI] Add streaming of hashtags
6 years ago
5dd6542db5
formatting
6 years ago
1089d3658e
user: fix up notification last calculation [NOT related to upstream]
6 years ago
46c7c2380c
Merge branch 'feature/relay' into 'develop'
...
message relay
Closes #144
See merge request pleroma/pleroma!264
6 years ago
440b459cd1
Merge branch 'bugfix/announce-timeline-flooding' into 'develop'
...
activitypub: filter destination list for announce activities differently than normal (closes #164 )
Closes #164
See merge request pleroma/pleroma!227
6 years ago
63094cfd3e
Merge branch 'feature/emoji-in-local-users' into 'develop'
...
Add emoji to local user profiles.
Closes #202
See merge request pleroma/pleroma!271
6 years ago
bc3c30430e
fix formatting
6 years ago
1ad5cbed51
Merge branch 'bugfix/common-api-visibility-orphan' into 'develop'
...
common api: properly handle replying to orphaned threads
See merge request pleroma/pleroma!299
6 years ago
741c6ad671
common api: handle replying to orphaned threads
6 years ago
c9e4c45e0e
Merge branch 'login-with-email' into 'develop'
...
When logging in, try treating the login as an email
Closes #245
See merge request pleroma/pleroma!295
6 years ago
0f5bff8c66
Merge branch 'develop' into 'feature/relay'
...
# Conflicts:
# lib/pleroma/web/activity_pub/utils.ex
6 years ago
946a0769c4
remove unused settings from /api/statusnet/config
6 years ago
540cce5d10
When logging in, try treating the login as an email
...
Closes #245
6 years ago
ffa552f1a4
Merge branch 'feature/twitterapi-object-description' into 'develop'
...
twitter api: provide object descriptions as attachment description field
See merge request pleroma/pleroma!293
6 years ago
aab2bdddf4
twitter api: provide object descriptions as attachment description field
6 years ago
290798b821
http: fix TLS server name indication
...
by default, hackney only sent TLS server name indication if TLS was locked
to TLS 1.2.
since there are many instances out there not speaking TLS 1.2, it is not
acceptable to lock SNI to TLS 1.2.
closes #261
6 years ago
be7a6db1f5
Merge branch 'bugfix/formatter-single-char-nicks' into 'develop'
...
formatter: fix single char local nicknames
Closes #163
See merge request pleroma/pleroma!290
6 years ago
9ded0ee1a5
Merge branch 'config/fe-collapse-subject' into 'develop'
...
fe config: add collapse_message_with_subject fe option
See merge request pleroma/pleroma!289
6 years ago
3e10d13909
formatter: adjust regexp captures to match local users with single character nicknames ( closes #163 )
6 years ago
09cb402203
fe config: add collapse_message_with_subject fe option
6 years ago
bf9f68b681
debug
6 years ago
a909fe45a6
formatting
6 years ago
52b44184b4
transmogrifier: reject activities lacking a valid ID
6 years ago
9b046d2a84
fixed notifications API completely breaking if there's a like for
...
missing (deleted) post.
6 years ago
d5bdd55b5d
[Pleroma.Web.TwitterAPI.UserView]: Do not fail if user.bio is nil
6 years ago
5dde6e4a00
[Pleroma.Web.MastodonAPI.StatusView] Fix rendering peertube videos
6 years ago
f6b06d2ac8
Merge branch 'feature/peertube_2' into 'develop'
...
rebase/update of feature/peertube
See merge request pleroma/pleroma!217
6 years ago
a6d4cc8917
Merge branch 'sanitize-bio' into 'develop'
...
mastodon api: sanitize the bio HTML
See merge request pleroma/pleroma!282
6 years ago
046741c60d
[Pleroma.Web.MastodonAPI.StatusView] Support Peertube Video titles
6 years ago
f5b056e3ce
[Pleroma.Web.ActivityPub.Transmogrifier]: Fix likes
6 years ago
3b8ef24532
Fix attachement rendering
6 years ago
a6b021a52b
Render peertube videos in mastodon.
6 years ago
c381d0b577
Use activitypub to fetch posts.
...
This falls back to ostatus.
6 years ago
74c74decf5
Basic peertube support.
6 years ago
ef4f982e2c
Pleroma.Web.ActivityPub.Transmogrifier: Fix actor being a list of objects (Peertube)
6 years ago
1495d04789
fix test for converting bio \r\n to <br>.
6 years ago
cdb3dd48ab
Format
6 years ago
5debd7b5cc
Twitter API: Support Mastodon-style bios
...
(multi-line, with links, and user mentions)
6 years ago
Hakaba Hitoyo