about summary refs log tree commit diff
path: root/app/controllers
AgeCommit message (Collapse)Author
2020-03-08exclude the werewolf api from secure modemultiple creatures
2020-03-02clean up timeline scoping & drop timeline options no longer used by monsterforkmultiple creatures
2020-02-27port tootsuite#11639 to monsterfork: Add option to include reported statuses ↵Eugen Rochko
in warning e-mail
2020-02-27port tootsuite#11805 to monserfork: Change deletes to preserve soft-deleted ↵Eugen Rochko
statuses in unresolved reports Change all account actions except "none" to resolve all unresolved reports Refactor `SuspendAccountService` to be more readable
2020-02-27port tootsuite#11623 to monsterfork: Add soft delete for statuses for ↵Eugen Rochko
instant deletes through API * Add soft delete for statuses to allow them to appear instant * Allow reporting soft-deleted statuses and show them in the admin UI * Change index for getting an account's statuses
2020-02-27**MAJOR**: fix posts with `hidden` flag being visible from profile pages ↵multiple creatures
(thanks @Brainship)
2020-02-27**MAJOR**: port tootsuite#13161 to monsterfork: Fix leak of arbitrary ↵Eugen Rochko
statuses through unfavourite action in REST API
2020-02-22re-add missing theming to sign-in pagemultiple creatures
2020-02-21include community visibility as part of posts visible from profilemultiple creatures
2020-02-21make peers api take graylist mode into considerationmultiple creatures
2020-02-21fix invisible mode being unfederatable, mask actor props & outbox instead of ↵multiple creatures
actor itself
2020-02-21use upstream check for reject media in media proxymultiple creatures
2020-02-21port tootsuite#11123 to monsterfork: Add audio uploadsEugen Rochko
* Add audio uploads Fix #4827 Accept uploads of OGG, WAV, FLAC, OPUS and MP3 files, and converts them to OGG. Media attachments get a new `audio` type. In the UI, audio uploads are displayed identically to video uploads. * Improve code style
2020-02-21Fix account JSON/RSS not being cacheable due to wrong mime type comparison ↵ThibG
(#13116) `request.format` is not a symbol but a `Mime::Type`, so the condition actually never matched, and a session was created even for those requests, preventing caching.
2020-02-21port tootsuite#12748 to monsterfork: Fix base64-encoded file uploads not ↵Eugen Rochko
being possible Fix #3804, Fix #5776
2020-02-21port tootsuite#11138 to monsterfork: Change domain blocks to automatically ↵Eugen Rochko
support subdomains * Change domain blocks to automatically support subdomains If a more authoritative domain is blocked (example.com), then the same block will be applied to a subdomain (foo.example.com) * Match subdomains of existing accounts when blocking/unblocking domains * Improve code style
2020-02-21Fix incoming federation in whitelist mode (#12185)ThibG
… posting to the AP inbox required a logged-in local user…
2020-02-21port tootsuite#11963 to monsterfork: Fix relays UI being available in ↵Eugen Rochko
whitelist/secure mode Fix relays UI referencing relay that is not functional
2020-02-21port tootsuite#11638 to monsterfork: Fix remote and staff-removed statuses ↵Eugen Rochko
leaving media behind for a day The reason for unattaching media instead of removing it is to support delete & redraft functionality, but remote or staff-removed statuses will never be redrafted, so the media should be deleted immediately
2020-02-21(lazily) port tootsuite#11298 to monsterfork: Add public blocks to /about/blocksThibG
* Add automatic blocklist display in /about/blocks Inspired by https://github.com/Gargron/mastodon.social-misc * Add admin option to set who can see instance blocks * Normalize locales files * Rename “Sandbox” to “Silence” for consistency * Disable /about/blocks when in whitelist mode * Optionally display rationale for domain blocks * Only display domain blocks that have user-facing limitations, and order them * Redesign table of blocked domains to better handle long domain names and rationales * Change domain blocks ordering now that rationales aren't displayed right away * Only show explanation for block severities actually in use * Reword instance block explanations and add disclaimer for public fetch mode
2020-02-21port tootsuite#11292 to monsterfork: Add whitelist modeEugen Rochko
2020-02-21port tootsuite#11375: Change unconfirmed user login behaviourEugen Rochko
Allow access to account settings, 2FA, authorized applications, and account deletions to unconfirmed and pending users, as well as users who had their accounts disabled. Suspended users cannot update their e-mail or password or delete their account. Display account status on account settings page, for example, when an account is frozen, limited, unconfirmed or pending review. After sign up, login users straight away and show a simple page that tells them the status of their account with links to account settings and logout, to reduce onboarding friction and allow users to correct wrongly typed e-mail addresses. Move the final sign-up step of SSO integrations to be the same as above to reduce code duplication.
2020-02-21Fix 422 being returned instead of 404 when POSTing (#11574)Eugen Rochko
2020-02-21port tootsuite#11702 to monsterfork: Fix uncaught parameter missing ↵Eugen Rochko
exceptions and missing error templates
2020-02-21port tootsuite#11770 to monsterfork: Add healthcheck endpoint for webYamagishi Kazutoshi
2020-02-21Fix HTML error pages being returned when JSON is expected (#12713)Eugen Rochko
Fix #12509 See also #12214
2020-02-21port tootsuite#12593 to monsterfork: Fix missing error templates for ↵Eugen Rochko
non-HTML requests
2020-02-21port tootsuite#8657: Change locale detection to run once per sessionEugen Rochko
Fix #6462
2020-02-21resolve stray merge conflictmultiple creatures
2020-02-20port tootsuite#12054 to monsterfork: Fix RSS caching (but disable localization)ThibG
2020-02-20Fix featured hashtag URL being interpreted as media or with_replies (#12048)Eugen Rochko
Fix #12034
2020-02-20port tootsuite#11978 to monsterfork: Fix redirecting non-functional accounts ↵Eugen Rochko
on public pages Fix #11969
2020-02-20port tootsuite#11333 to monsterfork: Add (back) rails-level JSON cachingEugen Rochko
2020-02-20Fix ActivityPub and REST API queries setting cookies and preventing caching ↵ThibG
(#11539) Regression from #8657
2020-02-20port tootsuite#10502 to monsterfork: Add an RSS feed tagged to a public ↵Takeshi Umeda
profile page * Add featured tag support to rss feed on public account page * fix codeing style
2020-02-20Fix `GET /api/v1/instance` REST APIs being unavailable in secure mode (#12089)Eugen Rochko
2020-02-20Fix proofs API being inaccessible in secure mode (#12495)Eugen Rochko
2020-02-20Fix generic HTTP 500 error on duplicate records (#12563)Eugen Rochko
Fix #12551 Fix #12547
2020-02-20port tootsuite#12716 to monsterfork: Fix error when fetching ↵Eugen Rochko
followers/following from REST API when user has network hidden Fix #12510
2020-02-20Fix missing authentication call in filters controller (#12746)Eugen Rochko
2020-02-20Change signature verification to ignore signatures with invalid host (#13033)Eugen Rochko
Instead of returning a signature verification error, pretend there was no signature (i.e., this does not allow access to resources that need a valid signature), so public resources can still be fetched Fix #13011
2020-02-20port tootsuite/#13042 to monsterfork: Fix malformed HTML causing uncaught errorEugen Rochko
Fix OEmbed preview API leaking existence of private statuses (see #12930)
2020-02-20Fix unfiltered params error when generating ActivityPub tag pagination (#13049)Eugen Rochko
2020-02-20Fix uncaught unknown format errors in host meta controller (#12747)Eugen Rochko
2020-02-20Add a nodeinfo endpoint (#12002)Eugen Rochko
* Add nodeinfo endpoint * dont commit stuff from my local dev * consistant naming since we implimented 2.1 schema * Add some additional node info stuff * Add nodeinfo endpoint * dont commit stuff from my local dev * consistant naming since we implimented 2.1 schema * expanding this to include federation info * codeclimate feedback * CC feedback * using activeserializers seems like a good idea... * get rid of draft 2.1 version * Reimplement 2.1, also fix metaData -> metadata * Fix metaData -> metadata here too * Fix nodeinfo 2.1 tests * Implement cache for monthly user aggregate * Useless * Remove ostatus from the list of supported protocols * Fix nodeinfo's open_registration reading obsolete setting variable * Only serialize domain blocks with user-facing limitations * Do not needlessly list noop severity in nodeinfo * Only serialize domain blocks info in nodeinfo when they are set to be displayed to everyone * Enable caching for nodeinfo endpoints * Fix rendering nodeinfo * CodeClimate fixes * Please CodeClimate * Change InstancePresenter#active_user_count_months for clarity * Refactor NodeInfoSerializer#metadata * Remove nodeinfo 2.1 support as the schema doesn't exist * Clean-up
2020-02-20port tootsuite#11869 to monsterfork: Fix webfinger response not returning ↵Eugen Rochko
410 when account is suspended
2020-02-20port tootsuite/#12930 to monsterfork: Fix OEmbed leaking information about ↵Eugen Rochko
existence of non-public statuses
2020-02-18move defang toggle to preferences instead of profilemultiple creatures
2020-02-18switch to irc-like oper behavior; require mods & admins to explicitly oper ↵multiple creatures
up using `fangs`/`op` bangtag or toggling defang setting in profile; auto-defang after 15 mins or with `defang`/`deop` bangtag
2020-02-17add a `manual_only` (manual trust only) moderation option + handle more ↵multiple creatures
`reject_unknown`/graylist mode caveats