Dennis Schubert
42b835f0c0
Enforce an ImageMagick policy.xml for all pods.
...
This fix was heavily inspired by Mastodon's fix for GHSA-9928-3cp5-93fm.
So, thank you Cure53 for finding this issue, thank you Mozilla for
paying Cure53 to look into it, and thanks for Mastodon for fixing it.
2023-07-10 01:12:36 +02:00
Benjamin Neff
b29675fead
Remove error if there was no error anymore
...
also add pod uri when logging offline pods ... just having a bunch of
"OFFLINE" log messages doesn't help at all.
2022-07-24 17:17:51 +02:00
Benjamin Neff
2e3bd14a09
Fix some update_attributes in tests only on next-minor
...
These were already fixed on develop in another branch but were never
backported, so lets do that now.
2022-07-20 22:59:30 +02:00
Benjamin Neff
b5a46cf7bb
Fix deprecation warnings for rails 6.0
2022-07-20 21:26:58 +02:00
Benjamin Neff
1570e3fb9a
Migrate remote_photo_path and cleanup old photo uploads
...
If the migration contains a new remote_photo_path migrate all photos of
the old person to this path. If the person was local before, cleanup old
uploaded files of the photos.
closes #8314
2021-11-23 00:43:56 +01:00
Thorsten Claus
88e2e593a4
Update open_graph_reader gem
...
closes #8307
2021-10-25 03:28:56 +02:00
Benjamin Neff
b2ba0123e1
Fix FactoryBot for next-minor
2021-08-16 01:02:08 +02:00
Thorsten Claus
8691e650dc
Person.find_or_fetch_by_identifier never return nil
...
Person.find_or_fetch_by_identifier raises an exception if person is not found localy and not fetchable. It never returns nil. These code changes take care about this behaviour and changes specs and code to behave equally.
Also related to #8253
2021-08-16 00:24:33 +02:00
Dennis Schubert
407f51d5a3
Allow points and dashes in the username.
...
This reverts b3ca504c40closes #8266
2021-07-04 22:07:21 +02:00
Thorsten Claus
43d489edda
Fixed test
...
closes #8244
2021-06-13 01:26:27 +02:00
Allan Klaus
b2b03d2679
Improve Service::Tumblr
...
- Fix rubocop styles
- Improve specs coverage
2021-06-13 01:24:48 +02:00
Jonne Haß
7960a51d12
update open_graph_reader to 0.7.1
2021-04-11 17:25:18 +02:00
gabrielrumiranda
394eafccc5
Actually implement validation error case in Photo#ownserhip_of_status_message
...
closes #8214
closes #8048
Co-authored-by: Thorsten Claus <thorstenclaus@web.de>
2021-04-11 17:22:40 +02:00
Noah Leal
ad91dddd63
Issue #8119 - Add length validation to a profile's gender field.
...
closes #8127
2020-06-13 23:31:03 +02:00
Jonne Haß
6a7e937d90
Update open_graph_reader to 0.7.0
...
This should fix undefined method `og' for #<OpenGraphReader::Base:0x00007f73c53f2308 @bases={}>
for sites that have OpenGraph tags of other namespaces but no actual OpenGraph core tags
2019-09-01 02:42:11 +02:00
Jonne Haß
1227f34b2a
Pass normalized URI to OpenGraphReader
...
This ensures the hostname is downcase and thus subsequent third party library
assumptions hold, namely http-cookie (pulled through faraday-cookie_jar) doesn't
raise
closes #8021
2019-05-24 22:43:08 +02:00
Benjamin Neff
165b8f4f6e
Don't encrypt the OTP secret
...
It doesn't add any security to have this encrypted, but it adds
complexity for podmins, because they need to backup the key.
closes #8014
2019-05-12 00:06:28 +02:00
lislis
9d5b981809
Two factor authentication ( #7751 )
2019-04-28 23:24:40 +02:00
Benjamin Neff
fc6893d4fc
Remove facebook integration
...
Facebook removed the API and facebook integration is broken now, so lets
remove it.
closes #7874
2018-10-08 02:50:25 +02:00
Benjamin Neff
08e108d3d8
Fix comment notification subject for posts without text
...
Fixes #7854
2018-09-05 03:17:58 +02:00
HankG
5a8bdc1e71
Facebook plugin always appends (via D* post URL) to cross-posts
...
fixes #7770
closes #7774
2018-06-20 00:47:12 +02:00
cmrd Senya
a3378ae744
Account merging: handle duplicates for TagFollowing
...
I missed it in #7803
closes #7807
2018-05-16 00:54:16 +02:00
cmrd Senya
cb294fd3f4
Add completed_at to account_migrations
...
Use completed_at datetime field as an indication of a performed migration
closes #7805
2018-05-03 21:31:29 +02:00
cmrd Senya
e9f6dbdffd
Add unique index to poll participations on author_id and poll_id
...
Previously we had only a Rails validation which ensured poll participation
uniqueness but this adds uniqueness control to the database level, so that
uniqueness is guaranteed even when changing data with avoiding Rails
validations.
closes #7798
2018-05-03 21:28:38 +02:00
cmrd Senya
8680b24a2e
Account merging support
...
Adds support for merging accounts with account migration by eliminating
duplicate data in favor of the target user's data.
closes #7803
2018-04-30 22:06:34 +02:00
HankG
211e5cd1bc
Bugfix 7714 twitter char overflow
...
closes #7791
2018-04-23 20:33:07 +02:00
Benjamin Neff
4fa92c1823
Remove flag for contacts visible to each other
...
This feature only worked on the same pod and was more confusing than
useful.
2018-04-12 01:39:11 +02:00
Benjamin Neff
4e5ee36675
Keep order of profile tags
...
closes #7724
2018-02-27 00:48:42 +01:00
Benjamin Neff
4cd8de5327
Refactor taggable tests to use let
2018-02-27 00:48:08 +01:00
Benjamin Neff
beeb073dbe
Fix followed tags posts in stream for posts with multiple tags
...
When there were posts with many followed tags they were returned
multiple times, resulting in less than 15 unique posts. That resulted in
some posts to be missed in the stream.
Fixes #4503
closes #7715
2018-02-25 04:35:49 +01:00
Benjamin Neff
c89b2ad809
Prevent duplicate mention notifications when the post is received twice
...
closes #7721
2018-02-22 00:49:21 +01:00
Benjamin Neff
b9787cc632
Start sending the blocking flag
2018-02-01 23:35:35 +01:00
Brad Koehn
1a3c16eb6e
update to support 280 character Twitter
...
closes #7694
closes #7662
fixes #7661
2018-01-09 00:05:33 +01:00
Janakas
0347507b20
Delete archive files when closing an account
...
closes #7684
2018-01-08 21:15:41 +01:00
Rete2
fc33a2ac5d
Create birthday notification and mailer
...
closes #7624
fixes #1649
2017-12-18 04:34:35 +01:00
cmrd Senya
ad025850ce
Forbid user destruction
2017-10-17 01:38:36 +02:00
cmrd Senya
973e9d98c6
Raise sensible error message when user is missing
...
That's for the case when podmin has messed up the database
2017-10-17 01:38:36 +02:00
cmrd Senya
f212b51f7f
Check for user existence on aspect membership destruction
2017-10-17 01:38:36 +02:00
Benjamin Neff
84b89d5594
Relay likes for comments
2017-09-28 23:04:35 +02:00
Benjamin Neff
c82e891c03
Add reference source and target behaviour
2017-09-28 23:04:34 +02:00
Benjamin Neff
28d3271933
Create refereces model
2017-09-28 23:04:34 +02:00
Benjamin Neff
95fbd3fc66
Don't change the filename of the export everytime the user is touched
...
closes #7622
2017-09-28 03:28:15 +02:00
cmrd Senya
9ee9dbe969
Fix local migration run without old private key
...
It was possible to run migration locally without providing old private
key. This way migration was performed but not dispatched, which obviously
leads to desynchronization of the federation state so let's validate sender
before performing any actual actions.
closes #7558
2017-09-26 04:06:16 +02:00
Benjamin Neff
655fe2a912
Cleanup invalid polls without status message
...
closes #7614
2017-09-18 03:24:52 +02:00
Benjamin Neff
e82690963d
Add # frozen_string_literal: true to all files
2017-09-17 19:29:15 +02:00
Benjamin Neff
04035c3eb7
Allow to receive reshares without root
...
closes #7590
2017-08-29 02:06:08 +02:00
Benjamin Neff
163ffdb19b
Allow multiple reshares without root
...
Follow-up for #7578
Fixes #7587
2017-08-29 02:05:43 +02:00
Rete2
b556ad5211
show users vote in poll
...
closes #7550
2017-08-26 03:16:05 +02:00
Benjamin Neff
b040f85790
Remove root_guid from reshares when post is deleted
...
And cleanup old reshares with deleted root posts
closes #7578
2017-08-26 03:08:37 +02:00
Benjamin Neff
17949ffb4e
Match parameter with match_array to fix order mismatch
...
closes #7546
2017-08-17 03:27:46 +02:00
