1. 26 Sep, 2019 1 commit
  2. 14 Aug, 2019 2 commits
  3. 14 Jul, 2019 1 commit
    • kaniini's avatar
      security: detect object containment violations at the IR level · 6d715b77
      kaniini authored
      It is more efficient to check for object containment violations at the IR
      level instead of in the protocol handlers.  OStatus containment is especially
      a tricky situation, as the containment rules don't match those of IR and
      ActivityPub.
      
      Accordingly, we just always do a final containment check at the IR level
      before the object is added to the IR object graph.
      6d715b77
  4. 24 Jun, 2019 1 commit
  5. 04 Jun, 2019 2 commits
  6. 03 Jun, 2019 2 commits
  7. 01 Jun, 2019 1 commit
    • rinpatch's avatar
      Add poll votes · 300d94c6
      rinpatch authored
      Also in this commit by accident:
      - Fix query ordering causing exclude_poll_votes to not work
      - Do not create notifications for Answer objects
      300d94c6
  8. 31 May, 2019 1 commit
    • rinpatch's avatar
      Mastodon API: Fix lists leaking private posts · d9c0650f
      rinpatch authored
      Our previous list visibility resolver grabbed posts if either follower
      collection of the user in a list who is followed is in `to` or if
      follower collection of the user in a list was in `cc`. This not only
      missed unlisted posts but also lead to leaking private posts when
      `fix_explicit_addressing` mistakingly started putting follower collections
      to `cc` (also fixed in this MR).
      
      Reported by @kurisu@iscute.moe via a DM
      d9c0650f
  9. 30 May, 2019 1 commit
  10. 23 May, 2019 1 commit
  11. 22 May, 2019 3 commits
  12. 21 May, 2019 3 commits
  13. 20 May, 2019 1 commit
  14. 19 May, 2019 1 commit
  15. 16 May, 2019 1 commit
  16. 15 May, 2019 5 commits
  17. 13 May, 2019 1 commit
  18. 12 May, 2019 1 commit
  19. 09 May, 2019 1 commit
  20. 08 May, 2019 3 commits
  21. 07 May, 2019 3 commits
  22. 03 May, 2019 1 commit
  23. 30 Apr, 2019 1 commit
  24. 22 Apr, 2019 2 commits