about summary refs log tree commit diff
path: root/app/controllers
AgeCommit message (Collapse)Author
2019-11-19Cleanup various controllers (#10972)ThibG
* Remove skip_session! as it is not supported in Rails 5 * Minor cleanup in StreamEntriesController * Remove redundant mark_cacheable! calls
2019-11-19Fix potential private status leak (#10969)ThibG
2019-11-19Fix poll API not requiring authentication on non-public polls (#10960)Eugen Rochko
* Fix poll API not requiring authentication on non-public polls That API does not reveal the content of the status, i.e. the question itself, nor who the author is, nor which status it belongs to, but it does reveal the poll options and how many answers they got Fix #10959 * Add test
2019-11-19Fix web push notifications for polls (#10864)ThibG
Fixes #10861
2019-11-19Add responsive panels to the single-column layout (#10820)Eugen Rochko
* Add responsive panels to the single-column layout * Fixes * Fix not being able to save the preference * Fix code style issues * Set max-height on the compose textarea and add a link to relationship manager
2019-11-19Move signature verification stoplight to the requests themselves (#10813)ThibG
* Move signature verification stoplight to the requests themselves This avoids blocking messages from known keys for 5 minutes when only one fails… * Put the stoplight on the actual client IP, not a potential reverse proxy
2019-11-19Add `account_id` param to `GET /api/v1/notifications` (#10796)Paul Woolcock
* Add `from_account` to notifications API this adds the ability to filter notifications by the account they originated from * passing a non-existent user should cause none to be returned * Fix codeclimate warnings * fix more codeclimate warnings * make requested changes: * use account id instead of user@domain * name the param `account_id` instead of `from_account` * Don't use `return` in a lambda
2019-11-18Get rid of the `Formatter` cache. It isn't worth the admin headaches.multiple creatures
2019-11-18Filter boosts from profile pages' Roars & Growls tab.multiple creatures
2019-11-18Remove unused and incompatable filter settings. These will be re-added in ↵multiple creatures
time as they're rewritten to use database-level filtering.
2019-11-18Remove `FilterHelper` include from timeline APIs.multiple creatures
2019-11-18Add a new profile option to filter posts with undescribed media. At some ↵multiple creatures
point, figure out how to put this under Filters, even if it angers the MVC model gods. No gods, no masters.
2019-11-17Do away with the kludgy solution of applying users' filters from API ↵multiple creatures
controllers; we will do this in the `Status` model instead, and at the database level.
2019-11-17When domain policies are created or updated, set the `processing` flag from ↵multiple creatures
the model instead of from the controller.
2019-11-06clear formatter cache when profile is changedmultiple creatures
2019-10-27add profile option to (locally) block anonymous views of public postsmultiple creatures
2019-10-27make data miners' lives harder by also requiring authentication on account ↵multiple creatures
api endpoints
2019-10-14exclude suspended (sub)domains from peers listmultiple creatures
2019-10-14add `/api/v1/werewolf` endpointmultiple creatures
2019-10-09custom filters can now also match posts with missing media descriptionsmultiple creatures
2019-10-09custom filters can now match media descriptionsmultiple creatures
2019-10-05apply custom filters to world and tag timelines the slow way until the ↵multiple creatures
custom filter system gets changed
2019-09-24work around vanilladon apps breaking when a custom filter uses monsterfork ↵multiple creatures
cw extensions - supporting clients can explicitly ask for those by setting `?all=1`
2019-09-17don't pre-cache media in tag bookmarks (we don't need to do this anymore)multiple creatures
2019-09-16stop pre-caching tag timeline mediamultiple creatures
2019-09-15stop pre-caching media on public, home, direct, & list timelinesmultiple creatures
2019-09-15pre-cache more pages of media at a time when browsing tagsmultiple creatures
2019-09-02`bookmarks` -> `account_bookmarks`multiple creatures
2019-09-02fix tag timeline media prefetching, remove `limit_params` from prefetch queriesmultiple creatures
2019-09-01pre-emptively fetch missing remote media when a timeline's api page is readmultiple creatures
2019-09-01fix breaking typomultiple creatures
2019-08-30use a scheduled task to batch domain policy changes + revert `29643fd6` to ↵multiple creatures
avoid accidentally dosing servers when multiple users block a domain
2019-08-30make sure media attachments are not from a blocked account, CDN, or their ↵multiple creatures
subdomains
2019-08-26detect spam registrations + include account approvals/rejections in ↵multiple creatures
transparancy log
2019-08-23raise 404 if no stream entrymultiple creatures
2019-08-18privacy - require authentication on all timeline endpoints to make life ↵multiple creatures
difficult for fediverse archivers
2019-08-15custom filters now have an option to add or override content warnings; ↵multiple creatures
filter caching has been fixed
2019-08-15fix err 500 when someone attempts to follow someone they're already followingmultiple creatures
2019-08-15handle interactions on sharekeyed posts when both participants are local; ↵multiple creatures
allow faving sharekeyed posts
2019-08-10fix interaction buttons on public pagesmultiple creatures
2019-08-08add new `reject unknown` policy option to prevent spam & harassment from ↵multiple creatures
large/undermoderated servers
2019-08-07add option to automatically space out boosts over configurable random intervalsmultiple creatures
2019-08-07remember login & clear signed-in notice when switching accountsmultiple creatures
2019-08-06added ability to link accounts with `account:link:token` + ↵multiple creatures
`account:link:add` & switch between them with `i:am`/`we:are` bangtags; remove links with `account:link:del:USERNAME` or `account:link:clear`; list links with `account:link:list`
2019-08-05add ability to access bookmarks from #self.bookmarks tagmultiple creatures
2019-08-04restrict private pin visibility to packmates & do not include them in ↵multiple creatures
`featured` collection (mainline masto does not respect pin visibility)
2019-08-02filters now have options to separately match post text, content ↵multiple creatures
warnings/titles, & hashtags + option to filter threads containing a matching post
2019-08-01strip paramsmultiple creatures
2019-07-31ability to add domain moderation notes, edit existing domain policies ↵multiple creatures
in-place, and process asynchronously
2019-07-31sort instance list by most recentmultiple creatures