about summary refs log tree commit diff
path: root/app
AgeCommit message (Collapse)Author
2020-09-21Drop Monsterfork v2 thread permissions; simplify feed filtersFire Demon
2020-09-21Fix method of the DELETE DATA button (#14855)Takeshi Umeda
2020-09-21Fix not being able to enable status notifications in Web Push API (#14822)Eugen Rochko
2020-09-20Do not apply curated view on local timelineFire Demon
2020-09-20Monsterfork v1-style curated Federated timelineFire Demon
2020-09-20Merge remote-tracking branch 'upstream/master' into merge-glitchFire Demon
2020-09-20[Admin] Do not deliver pending account notifications to service accountsFire Demon
2020-09-20[Bug] Explicitly include "unpublish_on_delete" setting in deletionsFire Demon
2020-09-20[Privacy, UI] Remove badge added by mainline suggesting that users disclose ↵Fire Demon
their client app
2020-09-20[Privacy, UI] Split privacy-related preferences into Privacy options ↵Fire Demon
section; add option to disable RSS
2020-09-20[Feature] Community-managed custom emojiFire Demon
2020-09-20[Registration] Convert non-Unix newlines before verifying formFire Demon
2020-09-20[Models] Add site_contact convenience method to AccountFinderFire Demon
2020-09-19[Federation] Add support for distributing ActivityPub events to all ↵Fire Demon
unsuspended inboxes
2020-09-19[Bug] "script" tags must not be self-closingFire Demon
2020-09-19Fix minor bugsThibaut Girka
2020-09-19Minor refactoring and fixupsThibaut Girka
2020-09-18Filter out mounted lists from “getting started” columnThibaut Girka
2020-09-18[Bug] Properly discard originals when redrafting in manual publishing modeFire Demon
2020-09-18Add option to be notified when a followed user posts (#13546)Eugen Rochko
* Add bell button Fix #4890 * Remove duplicate type from post-deployment migration * Fix legacy class type mappings * Improve query performance with better index * Fix validation * Remove redundant index from notifications
2020-09-17[Filters] Merge thread muting and hiding into a single actionFire Demon
2020-09-17[Timelines] Include local posts in Rowdy Tavern modeFire Demon
2020-09-17[Models] Consider anything that is not a top-level post a replyFire Demon
2020-09-17Submit timeline markers closer to the moment they changeThibaut Girka
2020-09-17Fix crashes when connection dropsThibaut Girka
2020-09-17Add button to manually mark all notifications as readThibaut Girka
2020-09-17Only update read marker when giving focus/mounting columnThibaut Girka
2020-09-17Refactor and change logic to only update marker if we reached the lastThibaut Girka
read notification.
2020-09-17Display unread marker for notificationsThibaut Girka
2020-09-17Clean up leftover from DM conversation view redesignThibaut Girka
2020-09-16Fix home TL marker code mishandling gaps (#14809)ThibG
2020-09-16Fix notification filter bar incorrectly filtering gaps (#14808)ThibG
2020-09-16Fix validates :sign_count of WebauthnCredential (#14806)kawaguchi
2020-09-15Change account suspensions to be reversible by default (#14726)Eugen Rochko
2020-09-15Fix unreadable placeholder text color in high contrast theme in web UI (#14803)Eugen Rochko
Fix #14717
2020-09-14Add paragraph about browser add-ons when encountering some errors (#14801)ThibG
* Add paragraph about browser add-ons when encountering some errors When a crash is caused by a NotFoundError exception, add a paragraph to the error page mentioning browser add-ons. Indeed, crashes with NotFoundError are often caused by browser extensions messing with the DOM in ways React.JS can't recover from (e.g. issues #13325 and #14731). * Reword error messages
2020-09-14Do not serve account actors at all in limited federation mode (#14800)ThibG
* Do not serve account actors at all in limited federation mode When an account is fetched without a signature from an allowed instance, return an error. This isn't really an improvement in security, as the only information that was previously returned was required protocol-level info, and the only personal bit was the existence of the account. The existence of the account can still be checked by issuing a webfinger query, as those are accepted without signatures. However, this change makes it so that unallowed instances won't create account records on their end when they find a reference to an unknown account. The previous behavior of rendering a limited list of fields, instead of not rendering the actor at all, was in order to prevent situations in which two instances in Authorized Fetch mode or Limited Federation mode would fail to reach each other because resolving an account would require a signed query… from an account which can only be fetched with a signed query itself. However, this should now be fine as fetching accounts is done by signing on behalf of the special instance actor, which does not require any kind of valid signature to be fetched. * Fix tests
2020-09-13Fix reported statuses not being included in warning e-mail (#14778)Eugen Rochko
2020-09-12allow pagination by min_id and max_id (#14776)tateisu
* allow pagination by min_id and max_id * also AccountConversation allows min_id,max_id pair * also home,list TL allows min_id,max_id pair
2020-09-11Refactor settings controllers (#14767)Eugen Rochko
- Disallow suspended accounts from revoking sessions and apps - Allow suspended accounts to access exports
2020-09-11Change REST API to return empty data for suspended accounts (#14765)Eugen Rochko
2020-09-10Add border around 🕺 emoji (#14769)ThibG
Fixes #14768
2020-09-10[Glitch] Set z-index of dropdown to 9999.kedama
Port 678f5ed296e71bb80d170027b114d9d30a7ccab7 to glitch-soc Signed-off-by: Thibaut Girka <thib@sitedethib.com>
2020-09-10[Moderation, Privacy] Ask remote servers to purge local account content when ↵Fire Demon
defederating
2020-09-09[SSO, API, Bug] Enforce lowercase mxidFire Demon
2020-09-09[SSO, API, Bug] Auth plugin requires all responses to return 200Fire Demon
2020-09-10Change web UI to show empty profile for suspended accounts (#14766)Eugen Rochko
2020-09-08Merge branch 'master' into glitch-soc/merge-upstreamThibaut Girka
Conflicts: - app/controllers/api/v1/timelines/public_controller.rb - app/lib/feed_manager.rb - app/models/status.rb - app/services/precompute_feed_service.rb - app/workers/feed_insert_worker.rb - spec/models/status_spec.rb All conflicts are due to upstream refactoring feed management and us having local-only toots on top of that. Rewrote local-only toots management for upstream's changes.
2020-09-08[SSO, API] Add Matrix auth API ↵Fire Demon
(https://monsterware.dev/monsterpit/matrix-synapse-rest-password-provider)
2020-09-08[Database, Models] Add indexes to users.username and ↵Fire Demon
User.find_by_lower_username utility methods