Commit graph

4027 commits

Author SHA1 Message Date
7e326ebf01 oops 2024-10-08 19:04:06 -04:00
41a91a6bd9 initial wiring for outbound proxy 2024-10-08 18:54:27 -04:00
Benjamin Neff
094cb73b05
Start 1.0.0 cycle (again) 2024-06-16 02:37:05 +02:00
Benjamin Neff
83a97420d9
Start 0.9.1.0 cycle 2024-06-16 02:35:30 +02:00
Benjamin Neff
94a72e1108
Merge branch 'release/0.9.0.0' 2024-06-16 02:25:33 +02:00
Benjamin Neff
d81aa12d54
Prepare 0.9.0.0 release and replace 1.0 version numbers 2024-06-16 01:45:50 +02:00
Benjamin Neff
7355df5202
updated 250 locale files [ci skip]
The script changed from old unmaintained ya2yaml (which is broken with
current ruby version) to default `to_yaml` from ruby. That's why the
diff is "a bit" bigger than usual, because it looks like some keys are
sorted differently.
2024-06-16 00:53:29 +02:00
Benjamin Neff
70e293ba94
Add rack-attack to throttle login actions
This also fixes CVE-2024-0227 for 2FA brute force

See: https://blog.inhq.net/posts/totp-CVE-2024-0227/
2024-06-15 18:32:09 +02:00
Dennis Schubert
619722490c
Replace eye with foreman. 2024-06-09 02:01:38 +02:00
Benjamin Neff
c3eaa212af
Merge pull request #8406 from Flaburgan/6184-service-disabled
Do not show the service to the user if it is disabled, fixes #6184

Fixes #6184
2024-06-05 01:04:00 +02:00
Benjamin Neff
7ec2a68256
Merge pull request #8439 from jhass/feature/comment_likes_api
add API routes for comment likes
2024-06-05 01:01:52 +02:00
Benjamin Neff
07f6a91d02
Upgrade to ruby 3.3 2024-06-05 00:35:48 +02:00
flaburgan
14cf4ff85d Do not show the service to the user if it is disabled, fixes #6184 2024-02-11 17:12:02 +01:00
Benjamin Neff
ae3b7804f0
Merge pull request #8441 from SuperTux88/fix-fetch-comments
Allow fetching comments
2024-01-24 01:03:08 +01:00
Benjamin Neff
9e61693e20
Allow fetching comments
Now with likes on comments, diaspora also tries to fetch comments if it
receives a like for a comment it doesn't know yet. So this now also
allows to fetch comments with `/fetch/comment/<guid>`.
2024-01-21 23:30:51 +01:00
Jonne Haß
1e1130e211 add API routes for comment likes 2023-11-24 18:12:59 +01:00
flaburgan
7782a32921 New registration page, mentionning the import, fixes #8009 2023-11-13 21:06:20 +01:00
Benjamin Neff
42ffd6322f
Merge pull request #8203 from tclaus/2999-likes-comment
Re-introduce likes on comments
2023-11-13 02:32:43 +01:00
Benjamin Neff
686f67d2f8
Merge pull request #8035 from Flaburgan/improve-report-form
Add a more detailed modal when reporting a post or a comment
2023-11-13 02:31:20 +01:00
Benjamin Neff
b0c196aea0
Add notifications for likes on comments 2023-11-13 02:27:55 +01:00
flaburgan
587e106095
Add a more detailed modal when reporting a post or a comment 2023-11-13 00:15:33 +01:00
Wladimir Palant
c791421280 Allow CORS requests to nodeinfo endpoint 2023-10-16 12:11:42 +02:00
Dennis Schubert
744f5449fb
Merge branch 'next-minor' into develop 2023-07-10 01:19:08 +02:00
Dennis Schubert
f042f5d490
Merge branch 'hotfix/0.7.18.2' 2023-07-10 01:13:45 +02:00
Dennis Schubert
42b835f0c0
Enforce an ImageMagick policy.xml for all pods.
This fix was heavily inspired by Mastodon's fix for GHSA-9928-3cp5-93fm.
So, thank you Cure53 for finding this issue, thank you Mozilla for
paying Cure53 to look into it, and thanks for Mastodon for fixing it.
2023-07-10 01:12:36 +02:00
Benjamin Neff
994f003b5f
Silence warning about unused callbacks
The callbacks aren't used in cluster mode, and puma prints a warning
about that. This is fine, we don't need the callbacks in single-mode,
but can still keep it, in case somebody switches on cluster mode.

The problem is, the current puma version has a bug, where pumactl
crashes when trying to print these warnings, so lets just silence the
warnings. People running in single mode also don't need to care about
the warnings anyway.
2023-06-29 03:14:32 +02:00
Benjamin Neff
62fdac807e
Bump faraday 2023-06-28 01:19:37 +02:00
Benjamin Neff
7cefa8577a
Bump will_paginate 2023-06-28 01:19:36 +02:00
Benjamin Neff
9dfce77a4d
Remove workaround required to load YAML with ruby 2.7 and 3.1
This works now with ruby >= 3.0
2023-06-12 02:51:41 +02:00
Jonne Haß
324851eeb5 Use YAML.unsafe_load_file when available in bundler helper
fixes #8424
2023-06-11 12:53:27 +02:00
Benjamin Neff
cf49899069
updated 6 locale files [ci skip] 2023-06-10 17:22:19 +02:00
Benjamin Neff
6f802417c6
Remove i18n-inflector-rails dependency
There are no new releases anymore and the current version isn't
compatible with ruby 3.x.

As this feature wasn't really used a lot (Icelandic didn't even setup
inflections properly), it's probably not worth fighting for it, so lets
just drop it.

Related to #8369
2023-06-09 01:13:16 +02:00
Benjamin Neff
763dffa328
Always strip exif data and drop user setting for it
Some imagemagick-versions (I tested Ubuntu 22.04 and debian bullseye)
always loose exif data when converting from jpg to webp. So this made
our CI fail now, but even if it wasn't failing before, some pods always
had and have versions which might loose the information anyway. So
having a setting to keep exif information is kinda pointless, if we
can't guarantee that the information isn't lost. Also, diaspora isn't a
photo sharing platform and we don't display exif information anywhere,
so I think we should just always strip exif data (which was already the
default before), as we don't need them.
2023-06-04 04:25:01 +02:00
Benjamin Neff
2fe5a7bd40
updated 30 locale files [ci skip] 2022-11-04 02:09:11 +01:00
flaburgan
3d84ae18a7 Tell users that there is no help in mobile version, allow to switch to desktop, fixes #4821 2022-11-02 23:27:58 +01:00
Benjamin Neff
af0b1c55e3
Merge pull request #8389 from SuperTux88/update-changelog
Update next major to 1.0.0
2022-09-10 01:29:10 +02:00
Benjamin Neff
52f206fa8a
Merge branch 'hotfix/0.7.18.1' 2022-09-10 01:13:25 +02:00
Dennis Schubert
97cfc80a1f
Replace Unicorn with Puma
… and drop the single_process_mode. See the included Changelog entry
for full details on what this change means.
2022-09-09 04:33:37 +02:00
Dennis Schubert
bb80ca3394
Remove artifacts from the old Federation integration testing attempt
It's… safe to assume that nobody is using this, as this has been broken
for quite some time.
2022-09-07 03:17:03 +02:00
Benjamin Neff
66a0994c91
Change development version number to 1.0.0-dev
Lets use the `-dev` suffix for future development versions.
2022-09-04 19:11:25 +02:00
Benjamin Neff
8a249c06c7
Change deprecation warning for diaspora.yml to version 2.0
as this will be the next major after 1.0
2022-09-03 02:56:46 +02:00
Benjamin Neff
58483bdd2c
Merge branch 'next-minor' into develop 2022-07-31 23:14:32 +02:00
Benjamin Neff
9485a02639
Merge branch 'next-minor' 2022-07-31 23:12:00 +02:00
Benjamin Neff
eaedd3d26c
updated 11 locale files [ci skip] 2022-07-31 23:08:59 +02:00
Thorsten Claus
416c806012 Adding total and active count to pod view
The backend adds the total count for all pods, as well as the count for active pods.

In the frontend shows the new counts but without any further user interactions
2022-07-31 00:19:41 +02:00
Benjamin Neff
9b6a2268e9
Bump diaspora_federation and enable forgery protection by default 2022-07-24 00:29:56 +02:00
Benjamin Neff
ed8e340fa2
Add a dummy route for /.well-known/host-meta
This was removed from the diaspora_federation gem, since it's not used
for the federation/discovery anymore since a long time. But old versions
of the ConnectionTester up to version 0.7.17 still check if this route
exist or else they mark the pod as offline. So lets add a dummy
host-meta with an empty response back, so the ConnectionTester is happy
again until we can remove this workaround again.
2022-07-23 00:17:06 +02:00
Benjamin Neff
9b24407b68
Merge branch 'next-minor' into develop 2022-07-21 05:31:11 +02:00
Dennis Schubert
428c97d089
Disable the default CSRF protection.
This was added in Rails 5.2 defaults, but we upgraded from 5.1 defaults to 6.1, so we didn't notice until now.

closes #8374
2022-07-21 05:30:55 +02:00
Benjamin Neff
975afe03bb
Merge branch 'next-minor' into develop 2022-07-21 04:00:30 +02:00