Commits · 4ac849cb4ad1ce10b4d8edd5c371f225c17ce757 · Pleroma / pleroma

20 Nov, 2018 3 commits
- common api: fix moderator check when deleting posts · 4ac849cb
  kaniini authored Nov 20, 2018
  
  4ac849cb
- user: fix user.info lookup in User.locked?() · 312676f7
  kaniini authored Nov 20, 2018
  
  312676f7
- Fix formatter tests. · 2887f4ff
  lain authored Nov 20, 2018
  
  2887f4ff
18 Nov, 2018 15 commits
- Several twitter api fixes. · fbb70d25
  lain authored Nov 18, 2018
  
  fbb70d25
- Fix user updating from AP. · 40d9d209
  lain authored Nov 18, 2018
  
  40d9d209
- Mix format. · cafa1513
  lain authored Nov 18, 2018
  
  cafa1513
- Fix most User tests. · 4c918392
  lain authored Nov 18, 2018
  
  4c918392
- Fix setting of keys. · e7cd6e97
  lain authored Nov 18, 2018
  
  e7cd6e97
- Fix following locked users. · fc3bcf33
  lain authored Nov 18, 2018
  
  fc3bcf33
- Fix note count update. · d5af41b5
  lain authored Nov 18, 2018
  
  d5af41b5
- Fix follower count test. · 6f90ceb2
  lain authored Nov 18, 2018
  
  6f90ceb2
- Fix user deactivation test. · 8e3d8bde
  lain authored Nov 18, 2018
  
  8e3d8bde
- Fix blocking. · 812f5b05
  lain authored Nov 18, 2018
  
  812f5b05
- Formatting. · 75676426
  lain authored Nov 18, 2018
  
  75676426
- Fix follower count setting. · b396dba4
  lain authored Nov 18, 2018
  
  b396dba4
- Fix note counting. · 5c8f07f0
  lain authored Nov 18, 2018
  
  5c8f07f0
- Fix User deactivation. · 47d883d3
  lain authored Nov 18, 2018
  
  47d883d3
- Add User.Info module · 50585d05
  lain authored Nov 18, 2018
```
To validate and mutate the user.info field.
```
  50585d05
17 Nov, 2018 22 commits
- Merge branch 'security/as2-object-render-hardening' into 'develop' · 51435014
  lain authored Nov 17, 2018
```
activitypub: object view: avoid leaking private details

See merge request !463
```
  51435014
- activitypub: object view: avoid leaking private details · f6be980f
  kaniini authored Nov 17, 2018
  
  f6be980f
- Merge branch 'bugfix/notice-urls-should-return-objects' into 'develop' · b471344b
  lain authored Nov 17, 2018
```
ostatus controller: respond with AS2 objects instead of activities to notice URIs

Closes #289 and #383

See merge request !462
```
  b471344b
- ostatus controller: respond with AS2 objects instead of activities to notice URIs · 98795172
  kaniini authored Nov 17, 2018
  
  98795172
- Merge branch 'security/spoofing-hardening' into 'develop' · d73c7cc0
  lain authored Nov 17, 2018
```
security: spoofing hardening

Closes #380, #381, and #382

See merge request !461
```
  d73c7cc0
- tests: federator: fix formatting · e10f839e
  kaniini authored Nov 17, 2018
  
  e10f839e
- activitypub: transmogrifier: make deletes secure · dfcfb184
  kaniini authored Nov 17, 2018
  
  dfcfb184
- test: add sanity tests for federator handling of AP docs · b1a6e8d8
  kaniini authored Nov 17, 2018
  
  b1a6e8d8
- federator: return :ok or :error depending on if an AP doc was accepted or not · 0d1375f2
  kaniini authored Nov 17, 2018
  
  0d1375f2
- federator: do origin containment when processing inbound messages · 3d9266a8
  kaniini authored Nov 17, 2018
  
  3d9266a8
- tests: add a test to verify the general fake direction protection works in all cases · 55640c48
  kaniini authored Nov 17, 2018
  
  55640c48
- tests: add a testcase for user collision · dc1d8e13
  kaniini authored Nov 17, 2018
  
  dc1d8e13
- activitypub: user fetching: use fetch_and_contain_remote_object_from_id() · c8853320
  kaniini authored Nov 17, 2018
  
  c8853320
- tests: add tests for contain_origin_from_id() · 1a940cb4
  kaniini authored Nov 17, 2018
  
  1a940cb4
- activitypub: factor out AP object fetching to it's own function and add ID-based containment · daa8ec3d
  kaniini authored Nov 17, 2018
  
  daa8ec3d
- Merge branch 'security/actor-containment' into 'develop' · a9609838
  lain authored Nov 17, 2018
```
security hotfix: actor containment

See merge request !460
```
  a9609838
- tests: add a second spoofing variant · b483ae0a
  kaniini authored Nov 17, 2018
  
  b483ae0a
- activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing · 603fccf1
  kaniini authored Nov 17, 2018
  
  603fccf1
- test: fix more test defects · 9c8adfb6
  kaniini authored Nov 17, 2018
  
  9c8adfb6
- tests: add additional spoofing tests · d9cb081f
  kaniini authored Nov 17, 2018
  
  d9cb081f
- transmogrifier tests: fix defective spoofing test · 2ab8e287
  kaniini authored Nov 17, 2018
  
  2ab8e287
- test: httpoison mock: add second spoofing activity test · 010fcb73
  kaniini authored Nov 17, 2018
  
  010fcb73