Alex Gleason
|
cf8e425883
|
StatusView: return quote post inside a reblog
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
93e4972b50
|
Add InlineQuotePolicy as a default MRF
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
bee7e41959
|
InlineQuotePolicy: don't add line breaks to markdown posts
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
74e0a4555f
|
StatusView: add `quote_visible` param
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
6f11f11519
|
StatusView: fix quote visibility
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
59326247aa
|
CommonAPI: disallow quoting private posts through the API
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
57ef1d1211
|
Add InlineQuotePolicy to force quote URLs inline
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
36a5578d2b
|
Scrubber.Default: allow span.quote-inline for quote post compatibility
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
1f19dd76f6
|
ActivityDraft: mix format, defensive actor ID
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
54a9897938
|
ActivityDraft: mention the OP of a quoted post
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
80ab2572a4
|
Return quote_url through the API, don't render quotes more than 1 level deep
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
db46abce47
|
@context: add quoteUrl
|
2023-09-13 19:19:04 -04:00 |
|
Alex Gleason
|
5716f88a1d
|
InstanceView: add "quote_posting" feature
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
f4ccdfd503
|
Fix typos
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
9600973917
|
mix format
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
cbd1760efa
|
TransmogrifierTest: prepare an outgoing quote post
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
3a8b5d90df
|
StatusControllerTest: test creating a quote post
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
c20e90e898
|
BuilderTest: build quote post
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
d4fea8b559
|
ActivityDraft: allow quoting
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
6ac19c3999
|
ActivityDraft: create quote posts
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
0d9c443e51
|
StatusView: render the whole quoted status
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
ce5eb31723
|
StatusView: show quoted posts through the API, probably
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
cc4badaf60
|
Transmogrifier: fix quoteUrl here too
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
b022d6635d
|
Transmogrifier: fetch quoted post
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
795736af16
|
ObjectValidators: improve quoteUrl compatibility
|
2023-09-13 19:19:03 -04:00 |
|
Alex Gleason
|
7deda1fa18
|
Quote post: add fixtures
|
2023-09-13 19:19:02 -04:00 |
|
Alex Gleason
|
31eb3dc245
|
ObjectValidators: accept "quoteUrl" field
|
2023-09-13 19:19:02 -04:00 |
|
Haelwenn
|
f966abe4fb
|
Merge branch 'release/2.5.5' into 'stable'
Release 2.5.5
See merge request pleroma/pleroma!3949
|
2023-09-03 12:12:44 +00:00 |
|
Haelwenn (lanodan) Monnier
|
385492577d
|
mix: version 2.5.5
|
2023-09-03 11:19:26 +02:00 |
|
Mint
|
535a5ecad0
|
CommonAPI: Prevent users from accessing media of other users
commit 1afde067b1 upstream.
|
2023-09-03 11:19:13 +02:00 |
|
Haelwenn
|
a94cf2ad4f
|
Merge branch 'check-attachment-attribution' into 'develop'
Prevent users from attaching other users' attachments
See merge request pleroma/pleroma!3947
|
2023-09-03 09:09:27 +00:00 |
|
Mint
|
1afde067b1
|
CommonAPI: Prevent users from accessing media of other users
|
2023-09-03 10:41:37 +02:00 |
|
Haelwenn
|
9da4f89b7b
|
Merge branch 'tusooa/lint' into 'develop'
Make lint happy
See merge request pleroma/pleroma!3944
|
2023-08-31 22:24:30 +00:00 |
|
tusooa
|
3c5ecca377
|
Skip changelog
|
2023-08-30 20:37:45 -04:00 |
|
tusooa
|
3d09bc320e
|
Make lint happy
|
2023-08-30 20:36:52 -04:00 |
|
Haelwenn
|
1e685c8302
|
Merge branch 'csp-flash' into 'develop'
allow https: so that flash works across instances without need for media proxy
See merge request pleroma/pleroma!3879
|
2023-08-16 13:37:49 +00:00 |
|
Haelwenn
|
d838d1990b
|
Apply lanodan's suggestion(s) to 1 file(s)
|
2023-08-16 13:34:32 +00:00 |
|
tusooa
|
b729a8b140
|
Merge branch 'fix-dockerfile-perms' into 'develop'
Fix config ownership in dockerfile to pass restriction test
See merge request pleroma/pleroma!3931
|
2023-08-10 00:42:29 +00:00 |
|
Cat pony Black
|
c298e0165c
|
Fix config ownership in dockerfile to pass restriction test
|
2023-08-08 19:07:48 +02:00 |
|
Haelwenn
|
4e355b8595
|
Merge branch 'disable-xml-entities-completely' into 'develop'
Completely disable xml entity resolution
See merge request pleroma/pleroma!3932
|
2023-08-06 08:27:27 +00:00 |
|
mae
|
48b1e9bdc7
|
Completely disable xml entity resolution
|
2023-08-05 14:17:04 +02:00 |
|
Haelwenn
|
17c336de66
|
Merge branch 'docs/gentoo-otp-intro' into 'develop'
gentoo_otp_en.md: Indicate which install method it covers
See merge request pleroma/pleroma!3928
|
2023-08-05 11:04:32 +00:00 |
|
Haelwenn
|
d0f7a5c4f5
|
Merge branch 'mergeback/2.5.4' into 'develop'
Mergeback: 2.5.4
See merge request pleroma/pleroma!3930
|
2023-08-05 08:13:03 +00:00 |
|
Haelwenn
|
1f4be2b349
|
Merge branch 'releases/2.5.4' into 'stable'
Release 2.5.4
See merge request pleroma/pleroma!3929
|
2023-08-05 08:12:25 +00:00 |
|
Haelwenn (lanodan) Monnier
|
4099ddb3dc
|
Mergeback release 2.5.4
|
2023-08-05 08:58:05 +02:00 |
|
Haelwenn (lanodan) Monnier
|
b631180b38
|
Release 2.5.4
|
2023-08-05 08:27:42 +02:00 |
|
Mark Felder
|
cc848b78dc
|
Document and test that XXE processing is disabled
https://vuln.be/post/xxe-in-erlang-and-elixir/
|
2023-08-05 08:23:04 +02:00 |
|
FloatingGhost
|
77d57c974a
|
Add unit test for external entity loading
|
2023-08-05 08:23:04 +02:00 |
|
Mae
|
fc10e07ffb
|
Prevent XML parser from loading external entities
|
2023-08-05 08:23:04 +02:00 |
|
Mark Felder
|
6d48b0f1a9
|
Document and test that XXE processing is disabled
https://vuln.be/post/xxe-in-erlang-and-elixir/
|
2023-08-05 08:14:27 +02:00 |