Commits · f6be980f4faaef9408333fe59f0bb915dd087fd0 · Pleroma / pleroma

17 Nov, 2018 24 commits
- activitypub: object view: avoid leaking private details · f6be980f
  kaniini authored Nov 17, 2018
  
  f6be980f
- Merge branch 'bugfix/notice-urls-should-return-objects' into 'develop' · b471344b
  lain authored Nov 17, 2018
```
ostatus controller: respond with AS2 objects instead of activities to notice URIs

Closes #289 and #383

See merge request !462
```
  b471344b
- ostatus controller: respond with AS2 objects instead of activities to notice URIs · 98795172
  kaniini authored Nov 17, 2018
  
  98795172
- Merge branch 'security/spoofing-hardening' into 'develop' · d73c7cc0
  lain authored Nov 17, 2018
```
security: spoofing hardening

Closes #380, #381, and #382

See merge request !461
```
  d73c7cc0
- tests: federator: fix formatting · e10f839e
  kaniini authored Nov 17, 2018
  
  e10f839e
- activitypub: transmogrifier: make deletes secure · dfcfb184
  kaniini authored Nov 17, 2018
  
  dfcfb184
- test: add sanity tests for federator handling of AP docs · b1a6e8d8
  kaniini authored Nov 17, 2018
  
  b1a6e8d8
- federator: return :ok or :error depending on if an AP doc was accepted or not · 0d1375f2
  kaniini authored Nov 17, 2018
  
  0d1375f2
- federator: do origin containment when processing inbound messages · 3d9266a8
  kaniini authored Nov 17, 2018
  
  3d9266a8
- tests: add a test to verify the general fake direction protection works in all cases · 55640c48
  kaniini authored Nov 17, 2018
  
  55640c48
- tests: add a testcase for user collision · dc1d8e13
  kaniini authored Nov 17, 2018
  
  dc1d8e13
- activitypub: user fetching: use fetch_and_contain_remote_object_from_id() · c8853320
  kaniini authored Nov 17, 2018
  
  c8853320
- tests: add tests for contain_origin_from_id() · 1a940cb4
  kaniini authored Nov 17, 2018
  
  1a940cb4
- activitypub: factor out AP object fetching to it's own function and add ID-based containment · daa8ec3d
  kaniini authored Nov 17, 2018
  
  daa8ec3d
- Merge branch 'security/actor-containment' into 'develop' · a9609838
  lain authored Nov 17, 2018
```
security hotfix: actor containment

See merge request !460
```
  a9609838
- tests: add a second spoofing variant · b483ae0a
  kaniini authored Nov 17, 2018
  
  b483ae0a
- activitypub: fetch_object_from_id(): prefer `actor` over `attributedTo` to avoid spoofing · 603fccf1
  kaniini authored Nov 17, 2018
  
  603fccf1
- test: fix more test defects · 9c8adfb6
  kaniini authored Nov 17, 2018
  
  9c8adfb6
- tests: add additional spoofing tests · d9cb081f
  kaniini authored Nov 17, 2018
  
  d9cb081f
- transmogrifier tests: fix defective spoofing test · 2ab8e287
  kaniini authored Nov 17, 2018
  
  2ab8e287
- test: httpoison mock: add second spoofing activity test · 010fcb73
  kaniini authored Nov 17, 2018
  
  010fcb73
- Merge branch 'feature/uploader-mdii' into 'develop' · 05967472
  kaniini authored Nov 17, 2018
```
Feature / MDII Uploader

See merge request !454
```
  05967472
- fallbacking into local uploader · 59e079f6
  hakabahitoyo authored Nov 17, 2018
  
  59e079f6
- better config reading · 8fd0556c
  hakabahitoyo authored Nov 17, 2018
  
  8fd0556c
16 Nov, 2018 10 commits
- Merge branch 'bugfix/dm-timeline-scope' into 'develop' · e4f57f89
  kaniini authored Nov 16, 2018
```
TwitterAPI: Fix dm_timeline displaying only half of the conversation.

See merge request !457
```
  e4f57f89
- TwitterAPI: Fix dm_timeline displaying only half of the conversation. · f87b3156
  lain authored Nov 16, 2018
  
  f87b3156
- Merge branch 'feature/pleromafe-usersearch' into 'develop' · 2f639ea1
  lain authored Nov 16, 2018
```
Add Twitter / Pleroma API user search

See merge request !452
```
  2f639ea1
- Merge branch 'bugfix/csp-remove-form-action' into 'develop' · 38f76d96
  kaniini authored Nov 16, 2018
```
http security: remove form-action from CSP definitions

Closes #379

See merge request !456
```
  38f76d96
- http security: remove form-action from CSP definitions · c0746460
  kaniini authored Nov 16, 2018
  
  c0746460
- Add better test for user search functionlity. · e8d8c84f
  lain authored Nov 16, 2018
  
  e8d8c84f
- Merge branch 'fix/test' into 'develop' · 4ad04325
  lain authored Nov 16, 2018
```
Reset http security settings to fix plug test

See merge request pleroma/pleroma!455
```
  4ad04325
- Reset http security settings to fix plug test · 62944b47
  h3poteto authored Nov 17, 2018
  
  62944b47
- better config · 55abd848
  hakabahitoyo authored Nov 16, 2018
  
  55abd848
- better extension detection · 52224de3
  hakabahitoyo authored Nov 16, 2018
  
  52224de3
15 Nov, 2018 6 commits
- debug · 4fbfacf5
  hakabahitoyo authored Nov 15, 2018
  
  4fbfacf5
- format · 8e707aba
  hakabahitoyo authored Nov 15, 2018
  
  8e707aba
- debuf · ebe658c1
  Hakaba Hitoyo authored Nov 15, 2018
  
  ebe658c1
- omplement mdii uploader · 698cb358
  Hakaba Hitoyo authored Nov 15, 2018
  
  698cb358
- add mdii uploader · 58af0787
  Hakaba Hitoyo authored Nov 15, 2018
  
  58af0787
- Merge remote-tracking branch 'official/develop' into develop · 5c8b8f6c
  Hakaba Hitoyo authored Nov 15, 2018
  
  5c8b8f6c