Commits · d73c7cc0caf322316541fe8daf72ec34d95e1520 · normandy / pleroma

Nov 17, 2018
- Merge branch 'security/spoofing-hardening' into 'develop' · d73c7cc0
  lain authored 6 years ago
  
  security: spoofing hardening Closes #380, #381, and #382 See merge request pleroma/pleroma!461
  d73c7cc0
- tests: federator: fix formatting · e10f839e
  kaniini authored 6 years ago
  
  e10f839e
- activitypub: transmogrifier: make deletes secure · dfcfb184
  kaniini authored 6 years ago
  
  dfcfb184
- test: add sanity tests for federator handling of AP docs · b1a6e8d8
  kaniini authored 6 years ago
  
  b1a6e8d8
- federator: return :ok or :error depending on if an AP doc was accepted or not · 0d1375f2
  kaniini authored 6 years ago
  
  0d1375f2
- federator: do origin containment when processing inbound messages · 3d9266a8
  kaniini authored 6 years ago
  
  3d9266a8
- tests: add a test to verify the general fake direction protection works in all cases · 55640c48
  kaniini authored 6 years ago
  
  55640c48
- tests: add a testcase for user collision · dc1d8e13
  kaniini authored 6 years ago
  
  dc1d8e13
- activitypub: user fetching: use fetch_and_contain_remote_object_from_id() · c8853320
  kaniini authored 6 years ago
  
  c8853320
- tests: add tests for contain_origin_from_id() · 1a940cb4
  kaniini authored 6 years ago
  
  1a940cb4
- activitypub: factor out AP object fetching to it's own function and add ID-based containment · daa8ec3d
  kaniini authored 6 years ago
  
  daa8ec3d
- Merge branch 'security/actor-containment' into 'develop' · a9609838
  lain authored 6 years ago
  
  security hotfix: actor containment See merge request pleroma/pleroma!460
  a9609838
- tests: add a second spoofing variant · b483ae0a
  kaniini authored 6 years ago
  
  b483ae0a
- activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing · 603fccf1
  kaniini authored 6 years ago
  
  603fccf1
- test: fix more test defects · 9c8adfb6
  kaniini authored 6 years ago
  
  9c8adfb6
- tests: add additional spoofing tests · d9cb081f
  kaniini authored 6 years ago
  
  d9cb081f
- transmogrifier tests: fix defective spoofing test · 2ab8e287
  kaniini authored 6 years ago
  
  2ab8e287
- test: httpoison mock: add second spoofing activity test · 010fcb73
  kaniini authored 6 years ago
  
  010fcb73
- Merge branch 'feature/uploader-mdii' into 'develop' · 05967472
  kaniini authored 6 years ago
  
  Feature / MDII Uploader See merge request pleroma/pleroma!454
  05967472
- fallbacking into local uploader · 59e079f6
  hakabahitoyo authored 6 years ago
  
  59e079f6
- better config reading · 8fd0556c
  hakabahitoyo authored 6 years ago
  
  8fd0556c
Nov 16, 2018
- Merge branch 'bugfix/dm-timeline-scope' into 'develop' · e4f57f89
  kaniini authored 6 years ago
  
  TwitterAPI: Fix dm_timeline displaying only half of the conversation. See merge request pleroma/pleroma!457
  e4f57f89
- TwitterAPI: Fix dm_timeline displaying only half of the conversation. · f87b3156
  lain authored 6 years ago
  
  f87b3156
- Merge branch 'feature/pleromafe-usersearch' into 'develop' · 2f639ea1
  lain authored 6 years ago
  
  Add Twitter / Pleroma API user search See merge request pleroma/pleroma!452
  2f639ea1
- Merge branch 'bugfix/csp-remove-form-action' into 'develop' · 38f76d96
  kaniini authored 6 years ago
  
  http security: remove form-action from CSP definitions Closes #379 See merge request pleroma/pleroma!456
  38f76d96
- http security: remove form-action from CSP definitions · c0746460
  kaniini authored 6 years ago
  
  c0746460
- Add better test for user search functionlity. · e8d8c84f
  lain authored 6 years ago
  
  e8d8c84f
- Merge branch 'fix/test' into 'develop' · 4ad04325
  lain authored 6 years ago
  
  Reset http security settings to fix plug test See merge request pleroma/pleroma!455
  4ad04325
- Reset http security settings to fix plug test · 62944b47
  h3poteto authored 6 years ago
  
  62944b47
- better config · 55abd848
  hakabahitoyo authored 6 years ago
  
  55abd848
- better extension detection · 52224de3
  hakabahitoyo authored 6 years ago
  
  52224de3
Nov 15, 2018
- debug · 4fbfacf5
  hakabahitoyo authored 6 years ago
  
  4fbfacf5
- format · 8e707aba
  hakabahitoyo authored 6 years ago
  
  8e707aba
- debuf · ebe658c1
  Hakaba Hitoyo authored 6 years ago
  
  ebe658c1
- omplement mdii uploader · 698cb358
  Hakaba Hitoyo authored 6 years ago
  
  698cb358
- add mdii uploader · 58af0787
  Hakaba Hitoyo authored 6 years ago
  
  58af0787
- Merge remote-tracking branch 'official/develop' into develop · 5c8b8f6c
  Hakaba Hitoyo authored 6 years ago
  
  5c8b8f6c
- Revert "update pleroma frontend" · 3484f687
  Hakaba Hitoyo authored 6 years ago
  
  This reverts commit 02530154.
  3484f687
Nov 14, 2018
- Format. · 27aa136a
  lain authored 6 years ago
  
  27aa136a
- Add Pleroma user search api for PleromaFE. · 7b170cd6
  lain authored 6 years ago
  
  7b170cd6