You can not select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.

William Pitcock 0159a6dbe9 router: require oauth_read for searching ... Search calls are generally expensive and allow unauthenticated users to crawl the instance for user profiles or posts which contain specified keywords. An adversary can build a distributed search engine which not only will consume significant instance resources, but also can be used for undesirable purposes such as datamining. Accordingly, require authenticated access to use the search API endpoints. This acts as a nice balance as it allows guest users to make use of most functionality available in Pleroma FE while ensuring that Pleroma instances are reasonably protected from resource exhaustion. It also removes Pleroma as a potential vector in distributed search engines.		5 years ago
..
activity_pub	Merge branch 'refactor/die-httpoison-die' into 'develop'	5 years ago
admin_api	Add Reports to Admin API	5 years ago
auth	differences_in_mastoapi_responses.md: fullname & bio are optionnal	5 years ago
channels	Use `User.get_cached*` everywhere	5 years ago
common_api	add Changelog entry	5 years ago
federator	remove @websub and @ostatus module-level constants	5 years ago
mastodon_api	kill @httpoison	5 years ago
media_proxy	Add mediaproxy whitelist capability	5 years ago
metadata	typo fix	6 years ago
mongooseim	Linting.	5 years ago
nodeinfo	Keep nodeinfo available when not federating	5 years ago
oauth	[#699] add worker to clean expired oauth tokens	5 years ago
ostatus	kill @httpoison	5 years ago
push	WebPush: Use Object.normalize, rewrite tests so they test reality.	5 years ago
rich_media	rich media: suppress link previews if post is marked as sensitive	5 years ago
salmon	kill @httpoison	5 years ago
templates	Merge branch '923_oauth_consumer_refactoring_ci' into 'develop'	6 years ago
twitter_api	Add virtual :thread_muted? field	5 years ago
views	logging: only return ISE reasons in API responses when in dev or test mode	6 years ago
web_finger	kill @httpoison	5 years ago
websub	kill @httpoison	5 years ago
xml	update copyright years to 2019	6 years ago
chat_channel.ex	[Credo] Remove parentesis on argument-less functions	6 years ago
controller_helper.ex	Refactoring functions for dealing with oauth scopes.	5 years ago
endpoint.ex	Move the Cache Control header test to its own file	5 years ago
gettext.ex	update copyright years to 2019	6 years ago
metadata.ex	Use object instead of activity for metadata	6 years ago
oauth.ex	Refactoring functions for dealing with oauth scopes.	5 years ago
rel_me.ex	Add `with_body: true` to requests relying on `max_body: val`	6 years ago
router.ex	router: require oauth_read for searching	5 years ago
streamer.ex	Credo fixes.	5 years ago
uploader_controller.ex	Make credo happy	6 years ago
web.ex	Made auth customization be runtime-configurable.	6 years ago