Commits · fc3bcf335e2c5ba1f8b1b25c1a4869cefff2a431 · Hakaba Hitoyo / pleroma

18 Nov, 2018 10 commits
- Fix following locked users. · fc3bcf33
  lain authored Nov 18, 2018
  
  fc3bcf33
- Fix note count update. · d5af41b5
  lain authored Nov 18, 2018
  
  d5af41b5
- Fix follower count test. · 6f90ceb2
  lain authored Nov 18, 2018
  
  6f90ceb2
- Fix user deactivation test. · 8e3d8bde
  lain authored Nov 18, 2018
  
  8e3d8bde
- Fix blocking. · 812f5b05
  lain authored Nov 18, 2018
  
  812f5b05
- Formatting. · 75676426
  lain authored Nov 18, 2018
  
  75676426
- Fix follower count setting. · b396dba4
  lain authored Nov 18, 2018
  
  b396dba4
- Fix note counting. · 5c8f07f0
  lain authored Nov 18, 2018
  
  5c8f07f0
- Fix User deactivation. · 47d883d3
  lain authored Nov 18, 2018
  
  47d883d3
- Add User.Info module · 50585d05
  lain authored Nov 18, 2018
```
To validate and mutate the user.info field.
```
  50585d05
17 Nov, 2018 25 commits
- Merge branch 'security/as2-object-render-hardening' into 'develop' · 51435014
  lain authored Nov 17, 2018
```
activitypub: object view: avoid leaking private details

See merge request !463
```
  51435014
- activitypub: object view: avoid leaking private details · f6be980f
  kaniini authored Nov 17, 2018
  
  f6be980f
- Merge branch 'bugfix/notice-urls-should-return-objects' into 'develop' · b471344b
  lain authored Nov 17, 2018
```
ostatus controller: respond with AS2 objects instead of activities to notice URIs

Closes #289 and #383

See merge request !462
```
  b471344b
- ostatus controller: respond with AS2 objects instead of activities to notice URIs · 98795172
  kaniini authored Nov 17, 2018
  
  98795172
- Merge branch 'security/spoofing-hardening' into 'develop' · d73c7cc0
  lain authored Nov 17, 2018
```
security: spoofing hardening

Closes #380, #381, and #382

See merge request !461
```
  d73c7cc0
- tests: federator: fix formatting · e10f839e
  kaniini authored Nov 17, 2018
  
  e10f839e
- activitypub: transmogrifier: make deletes secure · dfcfb184
  kaniini authored Nov 17, 2018
  
  dfcfb184
- test: add sanity tests for federator handling of AP docs · b1a6e8d8
  kaniini authored Nov 17, 2018
  
  b1a6e8d8
- federator: return :ok or :error depending on if an AP doc was accepted or not · 0d1375f2
  kaniini authored Nov 17, 2018
  
  0d1375f2
- federator: do origin containment when processing inbound messages · 3d9266a8
  kaniini authored Nov 17, 2018
  
  3d9266a8
- tests: add a test to verify the general fake direction protection works in all cases · 55640c48
  kaniini authored Nov 17, 2018
  
  55640c48
- tests: add a testcase for user collision · dc1d8e13
  kaniini authored Nov 17, 2018
  
  dc1d8e13
- activitypub: user fetching: use fetch_and_contain_remote_object_from_id() · c8853320
  kaniini authored Nov 17, 2018
  
  c8853320
- tests: add tests for contain_origin_from_id() · 1a940cb4
  kaniini authored Nov 17, 2018
  
  1a940cb4
- activitypub: factor out AP object fetching to it's own function and add ID-based containment · daa8ec3d
  kaniini authored Nov 17, 2018
  
  daa8ec3d
- Merge branch 'security/actor-containment' into 'develop' · a9609838
  lain authored Nov 17, 2018
```
security hotfix: actor containment

See merge request !460
```
  a9609838
- tests: add a second spoofing variant · b483ae0a
  kaniini authored Nov 17, 2018
  
  b483ae0a
- activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing · 603fccf1
  kaniini authored Nov 17, 2018
  
  603fccf1
- test: fix more test defects · 9c8adfb6
  kaniini authored Nov 17, 2018
  
  9c8adfb6
- tests: add additional spoofing tests · d9cb081f
  kaniini authored Nov 17, 2018
  
  d9cb081f
- transmogrifier tests: fix defective spoofing test · 2ab8e287
  kaniini authored Nov 17, 2018
  
  2ab8e287
- test: httpoison mock: add second spoofing activity test · 010fcb73
  kaniini authored Nov 17, 2018
  
  010fcb73
- Merge branch 'feature/uploader-mdii' into 'develop' · 05967472
  kaniini authored Nov 17, 2018
```
Feature / MDII Uploader

See merge request !454
```
  05967472
- fallbacking into local uploader · 59e079f6
  hakabahitoyo authored Nov 17, 2018
  
  59e079f6
- better config reading · 8fd0556c
  hakabahitoyo authored Nov 17, 2018
  
  8fd0556c
16 Nov, 2018 5 commits
- Merge branch 'bugfix/dm-timeline-scope' into 'develop' · e4f57f89
  kaniini authored Nov 16, 2018
```
TwitterAPI: Fix dm_timeline displaying only half of the conversation.

See merge request !457
```
  e4f57f89
- TwitterAPI: Fix dm_timeline displaying only half of the conversation. · f87b3156
  lain authored Nov 16, 2018
  
  f87b3156
- Merge branch 'feature/pleromafe-usersearch' into 'develop' · 2f639ea1
  lain authored Nov 16, 2018
```
Add Twitter / Pleroma API user search

See merge request !452
```
  2f639ea1
- Merge branch 'bugfix/csp-remove-form-action' into 'develop' · 38f76d96
  kaniini authored Nov 16, 2018
```
http security: remove form-action from CSP definitions

Closes #379

See merge request !456
```
  38f76d96
- http security: remove form-action from CSP definitions · c0746460
  kaniini authored Nov 16, 2018
  
  c0746460