nocebo/diaspora
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity Actions
diaspora/spec/lib
History
Maxwell Salzberg 190fceaf5c [SECURITY FIX] please update your pod ASAP 
This is a fix for public messages, where a malicious pod could spoof a message from someone a user was connected to, as the verified signatures were not checked that the object was also from said sender.  This hole only affected public messages, and the private part of code had the correct checks
THX to s-f-s(Stephan Schulz) for reporting and tracking down this issue, and props to Raven24(florian.staudacher@gmx.at) for helping me test the patch
2012-07-02 10:00:12 -07:00
..
diaspora Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
postzord [SECURITY FIX] please update your pod ASAP 2012-07-02 10:00:12 -07:00
salmon Revert "update factory girl" new version does not support 1.8.7 :( 2012-05-16 17:43:56 -07:00
stream Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
csv_generator_spec.rb commented out empty spec 2011-09-07 03:07:27 -07:00
direction_detector_spec.rb MS DG update copyright 2011-09-14 11:23:12 -07:00
email_inviter_spec.rb fixed rspec tests, more fit and finish around how the invite code works, 2012-03-16 17:56:35 -07:00
encryptor_spec.rb MS DG update copyright 2011-09-14 11:23:12 -07:00
evil_query_spec.rb Revert "update factory girl" new version does not support 1.8.7 :( 2012-05-16 17:43:56 -07:00
hcard_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
hydra_wrapper_spec.rb fix specs 2012-02-27 17:56:52 -08:00
i18n_interpolation_fallbacks_spec.rb MS DG update copyright 2011-09-14 11:23:12 -07:00
publisher_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
pubsubhubbub_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
rake_helper_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
statistics_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
template_picker_spec.rb kill rich-media type with fire 2012-05-21 12:33:28 -07:00
webfinger_profile_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00
webfinger_spec.rb Rails.root and File.join cleanup 2012-06-11 03:13:20 -07:00