Commit graph

1544 commits

Author SHA1 Message Date
Florian Staudacher
f9b54b5c10 make the rake task for cleaning up mixed-case tags more verbose [ci skip] 2012-07-04 22:43:43 +02:00
Maxwell Salzberg
190fceaf5c [SECURITY FIX] please update your pod ASAP
This is a fix for public messages, where a malicious pod could spoof a message from someone a user was connected to, as the verified signatures were not checked that the object was also from said sender.  This hole only affected public messages, and the private part of code had the correct checks
THX to s-f-s(Stephan Schulz) for reporting and tracking down this issue, and props to Raven24(florian.staudacher@gmx.at) for helping me test the patch
2012-07-02 10:00:12 -07:00
Florian Staudacher
bff069ab19 tinker with log messages for readability 2012-06-15 17:43:14 +02:00
Florian Staudacher
8f21657179 add all the colors of the rainbow, log into the same file
and throw in some formatting
2012-06-15 15:30:49 +02:00
Steven Hancock
2b47848da9 Autoload needs a string, not a Pathname
fixes #3373
2012-06-11 15:11:05 -07:00
Steven Hancock
a8de3a5a3f Rails.root and File.join cleanup
- `Rails.root` is a `Pathname`, so let's use `Rails.root.join`
- Clean up most of the remaining `File.join`s
2012-06-11 03:13:20 -07:00
Florian Staudacher
8ca39f5936 show a "post is not public" message when visitor is not logged in
and tries to access a show page of a non-public post
2012-06-07 22:16:37 +02:00
Steven Hancock
99a2865e23 Make hashtags clickable in emails
Refactor the Redcarpet renderer created in c2bc7272f to parse hashtags
into clickable links (for HTML emails only).
2012-05-29 10:01:58 -07:00
Steven Hancock
c2bc7272fb Escape hashtags in emails
Custom Redcarpet renderer to escape hashtags (but not legitimate headers)
in emails before Markdown processing. Prevents hashtags from being rendered
as H1 headers. This also leaves open the possibility of parsing hashtags
into clickable links in the future.

fixes #3325
2012-05-28 21:31:27 -07:00
Maxwell Salzberg
33efa45ec0 Merge pull request #3298 from diaspora/tags-fix-fix
fix another hashtag 'inconvenience'
2012-05-24 12:43:59 -07:00
Florian Staudacher
472340e540 add rake tasks for cleaning up mixed-case hashtags,
fix querying tagged models, in case multiple tags are found
----
the first rake task will attach all posts tagged with mixed-
case hashtags to their lower-case variant

    $ bundle exec rake migrations:rewire_uppercase_hashtags

the other rake task will remove the - now unused - mixed-case
hashtags from the db

    $ bundle exec rake migrations:remove_uppercase_hashtags

as always, perform a backup first! ;)
2012-05-24 21:28:35 +02:00
Maxwell Salzberg
8752dd4d58 no more oauth steps, so remove them from the runner and options 2012-05-22 11:06:36 -07:00
danielgrippi
777c037e16 kill rich-media type with fire 2012-05-21 12:33:28 -07:00
Florian Staudacher
d815cf5d82 take acts-as-taggable-on gem from git, solve tag case-sensitivity 2012-05-21 17:20:04 +02:00
danielgrippi
f4c06c8f88 add rounded buttons to the composer flow; slay multi-photo option 2012-05-18 19:46:51 -07:00
Maxwell Salzberg
64dae868fe fix some tests around pubsubhubub 2012-05-17 18:23:40 -07:00
Maxwell Salzberg
af1109dcf7 remove a couple more stray files we dont use anymore, and remove rest-client 2012-05-17 18:23:39 -07:00
Florian Staudacher
49117cc95f make federation logger db creation faster by not migrating but using the schema instead 2012-05-17 21:13:23 +02:00
Maxwell Salzberg
ab2e740ca2 upgrade to Rails 3.2.3 2012-05-14 21:53:16 -07:00
Dennis Collinson
f6e3c1b88b seperate interactions from posts
Lazily load post interactions on show page
hella refactorz
2012-05-12 17:41:58 -07:00
danielgrippi
871d3cc672 i am dumb. include custom mobile in before_deploy [ci skip] 2012-05-11 17:12:30 -07:00
danielgrippi
81661c883f custom landing page logic for mobile. yay 2012-05-11 17:05:09 -07:00
danielgrippi
f820e37838 use .erb for custom landing page instead of .haml [ci skip] 2012-05-11 02:27:33 -07:00
Dennis Collinson
51b1ade3bc DC DG; added LastThreeComments decorator so we don't have to load those comments when not needed (i.e. new profile pages) 2012-05-10 13:53:00 -07:00
Dennis Collinson
efa79a4ad7 Refactor Post Presenter
and comment presenter
2012-05-10 12:24:21 -07:00
Jonne Haß
008ed32e9e unambigousify community spotlight query in the multi stream, fix #3196 2012-04-28 12:28:07 +02:00
Jonne Haß
9cb803831f improve webfinger failure handling
* do not raise if profile xrd isn't found
* error out on a ssl error rather than on the unexpected nil value later
* be more verbose about failed xrd fetches
2012-04-27 16:53:26 +02:00
Maxwell Salzberg
a58260503f Revert "delegate ruby template picking on reshares so the posts look better"
This reverts commit 5eb2247191.
2012-04-26 17:58:38 -07:00
Jonne Haß
2357d9b0f1 update xrd fixture to include namespace and remove namespace before trying to set fields in webfinger profile 2012-04-27 00:05:28 +02:00
Maxwell Salzberg
5eb2247191 delegate ruby template picking on reshares so the posts look better 2012-04-25 18:10:43 -07:00
Maxwell Salzberg
66e9423dc9 more cool seed fixings 2012-04-24 13:48:14 -07:00
Maxwell Salzberg
6c5dafa6e9 cool seed wip [ci skip] 2012-04-24 01:13:57 -07:00
Maxwell Salzberg
8e22d69d8e fix webfinger for (old?) nokogiri syntax 2012-04-11 18:19:14 -07:00
Maxwell Salzberg
2fd0905591 dump more data in invite rake task 2012-04-04 19:08:36 -07:00
Maxwell Salzberg
518d2be1e1 use pretty formatter on CI for great justice 2012-04-03 21:51:18 -07:00
Maxwell Salzberg
f6eec580a0 collect invite tokens here, because why not 2012-04-03 19:57:19 -07:00
Maxwell Salzberg
7a37c0f42a dumb rake task to pipe user emails who have failed invites for
savekeeping [ci skip]
2012-04-03 19:01:54 -07:00
Maxwell Salzberg
a5b53717ea small typo fixes, in heroku and seed scripts [ci skip] 2012-04-03 15:02:10 -07:00
Maxwell Salzberg
bb5aa2821d use the built in asset_sync initializer. add a rake task to bootstrap
heroku and asset sync, which puts the S3 config vars in from your app
config.
2012-04-03 14:47:33 -07:00
Maxwell Salzberg
b33ee8c688 add asset sync gem 2012-04-02 18:32:35 -07:00
Steven Hancock
95d5c9ca68 Fix Jasmine tests - first pass
193 specs | 5 failing

The 5 failing specs appear (according to Firebug) to be due to missing
fixtures and/or missing routes in the Jasmine environment. Fixing these
last 5 failures is a task probably best left to a more experienced
Javascript/Jasmine developer.

This commit also moves validation.js and clear-form.js into
app/assets/javascripts and precompiles validation.js
2012-03-27 18:08:27 -07:00
Maxwell Salzberg
9d26643288 update heroku_san 2012-03-27 15:44:12 -07:00
Justin Thomas
22ac1d96a6 Add Resque.after_fork to correct problem with database connections and remove resque-ensure-connected 2012-03-25 14:39:42 -07:00
Maxwell Salzberg
a2aabeb599 remove ActiveSupport::SecureRandom 2012-03-21 13:49:34 -07:00
Maxwell Salzberg
319b3c4d3b fixed rspec tests, more fit and finish around how the invite code works,
and improving admin functionality
2012-03-16 17:56:35 -07:00
Maxwell Salzberg
6b97b8044b small updates, and it looks like we are mostly working 2012-03-16 17:56:35 -07:00
Maxwell Salzberg
7bac633987 invite_link functionailty mostly works 2012-03-16 17:56:35 -07:00
Stephan Schulz
4d1cb56e47 Allow for white spaces in Rails.root path for the integration rake task 2012-03-06 15:45:45 +01:00
Maxwell Salzberg
bd021bbd91 Correct our general exception handling.
thanks @mperham! see: http://t.co/Jyt7vV4I
2012-03-03 16:26:06 -08:00
Maxwell Salzberg
879b3d135a title now updates with switch 2012-02-27 18:40:56 -08:00