13039 commits

This branch

This branch

All branches

Author	SHA1	Message	Date
Claire	bea446d892	Update security policy for 4.1 branch (#32302)	2024-10-08 14:25:05 +02:00
Claire	9da2711173	Bump version to v4.1.20	2024-09-30 13:27:55 +02:00
Claire	59a3e728f7	Fix replies collection being cached improperly	2024-09-30 13:27:55 +02:00
Claire	00f23e8823	Change Mastodon to issue correctly-signed queries by default (#31994)	2024-09-30 13:27:55 +02:00
Claire	43fa9daede	Fix security context sometimes not being added in LD-Signed activities (#31871)	2024-09-30 13:27:55 +02:00
Claire	d2d0692232	Fix issue when encountering reblog of deleted post in feed rebuild (#32001)	2024-09-30 13:27:55 +02:00
blah	2c1d3f9357	Update dependency fugit	2024-09-30 13:27:55 +02:00
blah	f83ddd4eef	Update dependency rexml	2024-09-30 13:27:55 +02:00
blah	a2905bf0d3	Update dependency puma	2024-09-30 13:27:55 +02:00
blah	e142e37b79	Update dependency omniauth-saml	2024-09-30 13:27:55 +02:00
blah	f5b611dc26	Update dependency ruby-saml	2024-09-30 13:27:55 +02:00
David Roetzel	ad4fd788e4	Merge commit from fork ... This should not change the set of words matched by `USERNAME_RE` but does change the one matched by `MENTION_RE`. Indeed, the previous regexp allowed a domain part to start with `.` or `-`, which the new regexp does not allow. Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-09-30 12:25:54 +02:00
Claire	33e07454f2	Bump version to v4.1.19	2024-08-16 12:37:08 +02:00
Claire	9776a5dbdf	Fix linting issues	2024-08-16 12:37:08 +02:00
June	52e78d2192	Fix not all legal images showing in file picker when uploading custom emoji (#28076)	2024-08-16 12:37:08 +02:00
Jonathan de Jong	a046dcefe6	Fix error when encountering malformed Tag objects from Kbin (#28235)	2024-08-16 12:37:08 +02:00
Michael Stanclift	3e9238de47	Fix OCR when using S3/CDN for assets (#28551)	2024-08-16 12:37:08 +02:00
Claire	3868a63607	Fix already-invalid reports failing to resolve (#29027)	2024-08-16 12:37:08 +02:00
Claire	6383a2e4ee	Fix report reason selector in moderation interface not unselecting rules when changing category (#29026)	2024-08-16 12:37:08 +02:00
Claire	2084f1a081	Fix development environment admin account not being auto-approved (#29958)	2024-08-16 12:37:08 +02:00
Râu Cao	4d994fa24f	Fix local account search on LDAP login being case-sensitive (#30113) ... Co-authored-by: Claire <claire.github-309c@sitedethib.com>	2024-08-16 12:37:08 +02:00
Claire	aa3fc5364c	Fix division by zero on some video/GIF files (#30600)	2024-08-16 12:37:08 +02:00
Adam Niedzielski	f4b4a855ec	Fix ß bug in regexp for mentions and tags (#31122)	2024-08-16 12:37:08 +02:00
Claire	694cf6ca5c	Fix hashtag matching pattern matching some link anchors (#30190)	2024-08-16 12:37:08 +02:00
Adam Niedzielski	3e1f1b545d	Select correct self link when parsing Webfinger response (#31110)	2024-08-16 12:37:08 +02:00
Claire	67b38a5d64	Fix incorrect rate limit on PUT requests (#31356)	2024-08-16 12:37:08 +02:00
Claire	d673b6e920	Fix status processing failing halfway when a remote post has a malformed replies attribute (#31246)	2024-08-16 12:37:08 +02:00
Claire	ff90ebffaa	Bump version to v4.1.18 (#30911)	2024-07-04 16:46:39 +02:00
Claire	a1c7aae28a	Merge pull request from GHSA-xjvf-fm67-4qc3	2024-07-04 16:45:52 +02:00
Claire	34aeef3453	Merge pull request from GHSA-58x8-3qxw-6hm7 ... * Fix insufficient permission checking for public timeline endpoints Note that this changes unauthenticated access failure code from 401 to 422 * Add more tests for public timelines * Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`	2024-07-04 16:26:49 +02:00
Claire	122740047a	Merge pull request from GHSA-vp5r-5pgw-jwqx ... * Fix streaming sessions not being closed when revoking access to an app * Add tests for GHSA-7w3c-p9j8-mq3x	2024-07-04 16:11:28 +02:00
Claire	4b45333aff	fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584)	2024-07-03 11:13:40 +02:00
David Roetzel	6cf83a2a64	Improve encoding detection for link cards (#30780)	2024-07-03 11:13:40 +02:00
Eugen Rochko	2a5819e8bb	Change search modifiers to be case-insensitive (#30865)	2024-07-03 11:13:40 +02:00
David Roetzel	815680bd13	Add size limit for link preview URLs (#30854)	2024-07-03 11:13:40 +02:00
Claire	d8e8437a29	Update dependency rails	2024-07-02 16:20:04 +02:00
Tim Rogers	839147e099	Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691)	2024-07-02 16:20:04 +02:00
Claire	8e924e4338	Fix /admin/accounts/:account_id/statuses/:id for edited posts with media attachments (#30819)	2024-07-02 16:20:04 +02:00
Claire	2ee88a99d9	Change PWA start URL from /home to / (#27377)	2024-06-18 16:05:53 +02:00
Claire	1cad857f14	Bump version to v4.1.17 (#30472)	2024-05-30 15:49:14 +02:00
Claire	95ebcff98e	Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483)	2024-05-30 15:20:04 +02:00
Claire	d770b61a74	Merge pull request from GHSA-c2r5-cfqr-c553 ... * Add hardening monkey-patch to prevent IP spoofing on misconfigured installations * Remove rack-attack safelist	2024-05-30 14:24:29 +02:00
Claire	020228ddba	Merge pull request from GHSA-q3rg-xx5v-4mxh	2024-05-30 14:14:04 +02:00
Claire	e292a28933	Merge pull request from GHSA-5fq7-3p3j-9vrf	2024-05-30 14:03:13 +02:00
Claire	ba240cea0c	Normalize language code of incoming posts (#30403)	2024-05-29 15:31:34 +02:00
Claire	257f9abd56	Fix leaking Elasticsearch connections in Sidekiq processes (#30450)	2024-05-29 15:31:34 +02:00
Claire	b4e3a789b1	Update dependency rexml to 3.2.8	2024-05-29 15:31:34 +02:00
Claire	b39fbe7c83	Update dependency nokogiri to 1.16.5	2024-05-17 12:30:07 +02:00
Claire	c717b7da99	Update dependency puma to 5.6.8	2024-05-17 12:30:07 +02:00
Claire	13bbcdf4d4	Update dependency json-jwt to 1.15.3.1	2024-05-17 12:30:07 +02:00