Commit graph

59 commits

Author SHA1 Message Date
Jonne Haß
0a70e51f74 Add a token the filename for exported user data
Also redirect to it for download, for Amazon S3
compatibility.

Prior to this patch an attacker could obtain an
users export by guessing the filename with a high
chance of success. Fully authenticating the
download request is a lot harder due to our diverse
deployment scenarios.

This brings the used method in line with the photo
export feature.

Thanks to @tomekr for the report.
2015-04-22 20:19:17 +02:00
Marcelo Briones
b154d87070 Exports user photos as zip file 2015-03-03 19:45:57 -03:00
Marcelo Briones
63eca447d0 Strip EXIF data as user preference 2015-01-18 10:28:28 -03:00
James Kiesel
1c69dd7752 Add contacts/posts, and GZipping JSON exporter output 2015-01-15 00:20:19 +13:00
Diaspora Europe
e8d86f09bb resize full scaled image to a specific width #3793 2013-01-26 11:36:01 +01:00
Sean Tilley
49ea8c8563 Strip Beta Features 2012-09-11 21:52:53 -05:00
Zach Prezkuta
ab9bd2f9e3 #2322 -- rotate uploaded images based on the meta-data 2012-06-17 19:47:34 -06:00
danielgrippi
7d1f73261f use modulate instead of -brightness-contrast for now, as the cedar stack has an outdated version of mogrify [ci skip] 2012-05-06 13:57:35 -07:00
danielgrippi
92230383a7 added controller test; put wallpaper into separate wallpaper/ directory 2012-05-06 12:35:11 -07:00
danielgrippi
46d4a957fe don't use storage :file in wallpaper_uploader [ci skip] 2012-05-06 12:35:11 -07:00
danielgrippi
6010579c39 md5 the user's diaspora id for wallpaper image filename; clean up photo_form.js a little (thx max) 2012-05-06 12:35:11 -07:00
danielgrippi
56913ffb80 upload wallpaper for great success. 2012-05-06 12:35:11 -07:00
danielgrippi
a1907428e1 properly parse out gif dimensions. durrrrr. [ci skip] 2012-04-24 17:34:50 -07:00
Maxwell Salzberg
1b2440f68a we now store image height and width locally; still need to federate the values 2012-04-20 12:22:12 -07:00
Chase Reid
90eda36272 added support for uploading images with .tiff extensions 2012-01-02 21:40:46 -05:00
danielgrippi
91e649977c MS DG update copyright 2011-09-14 11:23:12 -07:00
Raphael Sofaer
c7331230bc Revert "Revert "Revert "remove uploaded test images after running the specs/cucumber"" -- using == now instead of ="
This reverts commit b11bd23da2.
2011-08-18 12:06:04 -07:00
danielgrippi
b11bd23da2 Revert "Revert "remove uploaded test images after running the specs/cucumber"" -- using == now instead of =
This reverts commit 7969b52035.
2011-08-18 11:20:49 -07:00
danielgrippi
7969b52035 Revert "remove uploaded test images after running the specs/cucumber"
This reverts commit a6eb275c7a.
2011-08-18 11:11:08 -07:00
danielgrippi
a6eb275c7a remove uploaded test images after running the specs/cucumber 2011-08-18 11:08:57 -07:00
Raphael Sofaer
a8104da482 Strip exif in the scaling process 2011-08-03 14:34:54 -07:00
danielgrippi
e84635dae2 constrain in the image uploader, don't crop 2011-07-10 17:03:38 -07:00
Raphael Sofaer
fdd158d86a Make urls not change on processing 2011-03-21 18:42:36 -07:00
Raphael Sofaer
2b997e70c2 Refactor image processing to use 2 uploaders. Federation and s3 need testing 2011-03-21 16:40:53 -07:00
maxwell
5aa969559c add processed to post, which is set to default false for photos 2011-03-18 18:51:53 -07:00
maxwell
300f592a64 do not process gifs, just let them be. 2011-03-17 22:43:18 -07:00
maxwell
37fefc5bc9 take out gif exception for processing 2011-03-17 14:16:08 -07:00
maxwell
7ba90a5a98 stuff works 2011-03-17 13:59:53 -07:00
maxwell
bca184eaf3 photos are now successfully delayed 2011-03-17 13:59:53 -07:00
maxwell
516b620148 gif and delayed processing wip 2011-03-17 13:59:53 -07:00
zhitomirskiyi
3f21a05e3e remove s3 setting 2011-01-17 16:46:39 -08:00
zhitomirskiyi
7ef89acf81 added the redirect to the nginx conf 2011-01-17 15:56:06 -08:00
Raphael
ee20b00f58 Only the time zone errors are left, and those could probably be ignored 2011-01-10 18:30:52 -08:00
danielvincent
857a4b5f11 photo large is now at 300px. a person's profile photo now references the larger size instead of medium. 2010-11-22 10:32:14 -08:00
danielvincent
c841a47a37 status messages validate on presence of message OR one or more photos. took gifs out of carrierwave's whitelist, SORRY JAMIE. 2010-11-21 23:42:49 -08:00
zhitomirskiyi
7f5b98a6cb the photo image url is now randomized 2010-11-04 14:37:08 -07:00
Raphael
1fd3aeabd9 Add or later to license notice 2010-10-07 16:25:34 -07:00
Guillermo
8a92f15948 storage isn't required here since is set in initializer 2010-09-26 11:04:19 -05:00
Stephen Caudill
536cea5e44 Remove consecutive empty lines 2010-09-25 12:06:39 -04:00
Raphael
708e9f88a5 Spell our own name right 2010-09-15 17:56:18 -07:00
Raphael
aa3ebe372c License notices replaced 2010-09-15 10:58:48 -07:00
Daniel Vincent Grippi
4c15b1a01c added license to every single goddamn file. also, put one in the root dir. 2010-09-13 14:23:50 -07:00
danielvincent
a886b8ddbc made photos for album previews 200x200, small thumbnails now at 50x50 2010-08-26 15:13:33 -07:00
Raphael
dbb16faed1 Photo filename is now better 2010-08-23 15:10:19 -07:00
Raphael
7ed31ab96a Moving to file store 2010-08-18 16:37:05 -07:00
danielvincent
c81ea5a632 minor changes 2010-08-14 00:21:10 -07:00
Raphael
e3c28c4fee Fixed Photos, and Carrierwave initializer 2010-08-02 21:31:14 -07:00
Raphael
b8ae6b44a2 RS; Image filename is now the Photo model id 2010-08-02 10:05:34 -07:00
ilya
f866872d7a now should be saving to the directory without the wrong id in the name 2010-07-23 15:49:08 -07:00
ilya
1b32afc78f Switching to Grid_FS, correctly 2010-07-23 14:53:12 -07:00