Commits · daa8ec3d6273b7002ddee041686adf7652ec8e18 · Pleroma / pleroma

17 Nov, 2018 11 commits
- activitypub: factor out AP object fetching to it's own function and add ID-based containment · daa8ec3d
  kaniini authored Nov 17, 2018
  
  daa8ec3d
- Merge branch 'security/actor-containment' into 'develop' · a9609838
  lain authored Nov 17, 2018
```
security hotfix: actor containment

See merge request !460
```
  a9609838
- tests: add a second spoofing variant · b483ae0a
  kaniini authored Nov 17, 2018
  
  b483ae0a
- activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing · 603fccf1
  kaniini authored Nov 17, 2018
  
  603fccf1
- test: fix more test defects · 9c8adfb6
  kaniini authored Nov 17, 2018
  
  9c8adfb6
- tests: add additional spoofing tests · d9cb081f
  kaniini authored Nov 17, 2018
  
  d9cb081f
- transmogrifier tests: fix defective spoofing test · 2ab8e287
  kaniini authored Nov 17, 2018
  
  2ab8e287
- test: httpoison mock: add second spoofing activity test · 010fcb73
  kaniini authored Nov 17, 2018
  
  010fcb73
- Merge branch 'feature/uploader-mdii' into 'develop' · 05967472
  kaniini authored Nov 17, 2018
```
Feature / MDII Uploader

See merge request !454
```
  05967472
- fallbacking into local uploader · 59e079f6
  hakabahitoyo authored Nov 17, 2018
  
  59e079f6
- better config reading · 8fd0556c
  hakabahitoyo authored Nov 17, 2018
  
  8fd0556c
16 Nov, 2018 10 commits
- Merge branch 'bugfix/dm-timeline-scope' into 'develop' · e4f57f89
  kaniini authored Nov 16, 2018
```
TwitterAPI: Fix dm_timeline displaying only half of the conversation.

See merge request !457
```
  e4f57f89
- TwitterAPI: Fix dm_timeline displaying only half of the conversation. · f87b3156
  lain authored Nov 16, 2018
  
  f87b3156
- Merge branch 'feature/pleromafe-usersearch' into 'develop' · 2f639ea1
  lain authored Nov 16, 2018
```
Add Twitter / Pleroma API user search

See merge request !452
```
  2f639ea1
- Merge branch 'bugfix/csp-remove-form-action' into 'develop' · 38f76d96
  kaniini authored Nov 16, 2018
```
http security: remove form-action from CSP definitions

Closes #379

See merge request !456
```
  38f76d96
- http security: remove form-action from CSP definitions · c0746460
  kaniini authored Nov 16, 2018
  
  c0746460
- Add better test for user search functionlity. · e8d8c84f
  lain authored Nov 16, 2018
  
  e8d8c84f
- Merge branch 'fix/test' into 'develop' · 4ad04325
  lain authored Nov 16, 2018
```
Reset http security settings to fix plug test

See merge request !455
```
  4ad04325
- Reset http security settings to fix plug test · 62944b47
  h3poteto authored Nov 17, 2018
  
  62944b47
- better config · 55abd848
  hakabahitoyo authored Nov 16, 2018
  
  55abd848
- better extension detection · 52224de3
  hakabahitoyo authored Nov 16, 2018
  
  52224de3
15 Nov, 2018 7 commits
- debug · 4fbfacf5
  hakabahitoyo authored Nov 15, 2018
  
  4fbfacf5
- format · 8e707aba
  hakabahitoyo authored Nov 15, 2018
  
  8e707aba
- debuf · ebe658c1
  Hakaba Hitoyo authored Nov 15, 2018
  
  ebe658c1
- omplement mdii uploader · 698cb358
  Hakaba Hitoyo authored Nov 15, 2018
  
  698cb358
- add mdii uploader · 58af0787
  Hakaba Hitoyo authored Nov 15, 2018
  
  58af0787
- Merge remote-tracking branch 'official/develop' into develop · 5c8b8f6c
  Hakaba Hitoyo authored Nov 15, 2018
  
  5c8b8f6c
- Revert "update pleroma frontend" · 3484f687
  Hakaba Hitoyo authored Nov 15, 2018
```
This reverts commit 02530154.
```
  3484f687
14 Nov, 2018 6 commits
- Format. · 27aa136a
  lain authored Nov 14, 2018
  
  27aa136a
- Add Pleroma user search api for PleromaFE. · 7b170cd6
  lain authored Nov 14, 2018
  
  7b170cd6
- Merge branch 'fix-media-proxy-filename' into 'develop' · cc45797f
  lain authored Nov 14, 2018
```
media_proxy: use path only to retrieve filename

See merge request !450
```
  cc45797f
- Merge branch 'update/pleroma-fe-20181114' into 'develop' · 8456675c
  kaniini authored Nov 14, 2018
```
update pleroma frontend

See merge request pleroma/pleroma!451
```
  8456675c
- update pleroma frontend · 2a75de84
  kaniini authored Nov 14, 2018
  
  2a75de84
- Merge branch 'twitter-api-direct-messages' into 'develop' · 69d557e8
  kaniini authored Nov 14, 2018
```
Twitter api direct messages

See merge request pleroma/pleroma!449
```
  69d557e8
13 Nov, 2018 6 commits
- media_proxy: use path only to retrieve filename · f52a1d1e
  href authored Nov 13, 2018
  
  f52a1d1e
- TwitterApi: Add direct message endpoint · ea9a776d
  lain authored Nov 13, 2018
  
  ea9a776d
- MastodonAPI: Add pagination to private messages. · 2cf40237
  lain authored Nov 13, 2018
  
  2cf40237
- Merge branch 'media-proxy-safety' into 'develop' · a43195bd
  lain authored Nov 13, 2018
```
media_proxy: CSP, content-disposition

See merge request pleroma/pleroma!448
```
  a43195bd
- media_proxy: CSP, content-disposition · 9b553a10
  href authored Nov 13, 2018
```
* Adds CSP headers to the media proxy endpoint

* Sends `content-disposition: attachment; …` for non-image/video/audio
content types

The default list can be overwritten with `:media_proxy,
:safe_content_types` in the configuration.

* Also now appends the filename to the proxy URL (fixes some mobile apps,
it was requested a while ago)
```
  9b553a10
- Merge branch 'security/cookie-hardening' into 'develop' · 22d20c49
  lain authored Nov 13, 2018
```
Add __Host- prefix when secure flag is enabled

See merge request pleroma/pleroma!446
```
  22d20c49