sergiotarxz/Pleroma
1
0
Fork 0
Code Issues Pull Requests Releases Wiki Activity
2c68cf7e9e
Pleroma/lib/pleroma
History
Ivan Tashkinov 2c68cf7e9e OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security breach fix. 
(`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris,
and if that happened before /web/login is accessed for the first time
then Pleroma used this externally created record with arbitrary
redirect_uris and client_secret known by creator).
2019-02-07 22:14:06 +03:00
..
captcha Merge branch 'captcha' into 'develop' 2019-01-03 17:04:27 +00:00
config fix hellthread threshold deprecation warning 2019-02-04 18:26:56 +01:00
emails update copyright years to 2019 2018-12-31 15:41:47 +00:00
gopher update copyright years to 2019 2018-12-31 15:41:47 +00:00
http Use multiple hackney pools 2019-01-30 15:06:46 +01:00
instances [#582] Optimized federation retirement by reducing the number of SQL calls 2019-02-03 12:41:27 +03:00
plugs Serve sw-pleroma.js properly 2019-02-01 11:34:41 +01:00
upload update copyright years to 2019 2018-12-31 15:41:47 +00:00
uploaders Use multiple hackney pools 2019-01-30 15:06:46 +01:00
user hide_followings was renamed to hide_followers in the FE, but never synced up in the BE 2019-02-06 22:34:44 +00:00
web OAuth2 security fixes: redirect URI validation, "Mastodon-Local" security breach fix. 2019-02-07 22:14:06 +03:00
activity.ex Merge branch 'classic-flakeids' into 'develop' 2019-01-25 04:59:06 +00:00
application.ex use Mix.Project.Config for some Application functions 2019-02-01 14:11:23 -03:00
clippy.ex Fix clippy with one/five lines 2019-01-24 16:53:14 +01:00
config.ex update copyright years to 2019 2018-12-31 15:41:47 +00:00
emoji.ex update copyright years to 2019 2018-12-31 15:41:47 +00:00
filter.ex Flake Ids for Users and Activities 2019-01-23 11:26:27 +01:00
flake_id.ex Merge branch 'flake-random-worker-id' into 'develop' 2019-01-27 15:16:06 +00:00
formatter.ex Merge branch 'develop' into 'oembed_provider' 2019-01-25 05:00:47 +00:00
html.ex html: don't attempt to parse nil content 2019-02-05 05:06:17 +00:00
instances.ex [#534] Various tweaks. Tests for Instances and Instance. 2019-01-28 15:25:06 +03:00
list.ex Flake Ids for Users and Activities 2019-01-23 11:26:27 +01:00
mime.ex Mime: detect RIFF formats (wave, webp, avi) 2019-02-04 17:44:41 +01:00
notification.ex Join on preloads to avoid N+1 queries 2019-01-26 15:55:53 +01:00
object_tombstone.ex Revert Activity tombstones, add ObjectTombstone struct 2018-12-25 03:00:06 +03:00
object.ex Still do caching in tests. 2019-02-03 18:28:14 +01:00
PasswordResetToken.ex Flake Ids for Users and Activities 2019-01-23 11:26:27 +01:00
repo.ex update copyright years to 2019 2018-12-31 15:41:47 +00:00
reverse_proxy.ex [#534] Made federation push sender be determined basing on content instead of referer header. Updated tests. 2019-01-29 13:12:28 +03:00
stats.ex [#502] Fixed user_count in /api/v1/instance to include only active local users. 2019-01-17 19:16:02 +03:00
upload.ex Update Mogrify docs and warning for deprecated syntax to encourage 2019-02-03 16:39:42 +00:00
user_invite_token.ex update copyright years to 2019 2018-12-31 15:41:47 +00:00
user.ex User.follow_all: ensure its stays unique 2019-01-31 18:17:44 +01:00