Claire
dc8f1fbd97
Merge pull request from GHSA-9928-3cp5-93fm
...
* Fix attachments getting processed despite failing content-type validation
* Add a restrictive ImageMagick security policy tailored for Mastodon
* Fix misdetection of MP3 files with large cover art
* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
Claire
6d8e0fae3e
Merge pull request from GHSA-ccm4-vgcc-73hp
...
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
Claire
fed9cbfd2b
Add hardened headers to user-uploaded files ( #25756 )
2023-07-06 14:31:37 +02:00
Claire
c78280a8ce
Add translate="no" to outgoing mentions and links ( #25524 )
2023-06-20 18:10:19 +02:00
Matt Jankowski
b5675e265e
Add coverage for CLI::Feeds
command ( #25319 )
2023-06-10 18:37:36 +02:00
Matt Jankowski
07933db788
Add coverage for CLI::Cache
command ( #25238 )
2023-06-10 18:36:09 +02:00
Nick Schonning
c66250abf1
Autofix Rubocop Regex Style rules ( #23690 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2023-06-06 14:50:51 +02:00
Jed Fox
768b00c4d0
Consistently use middle dot (·) instead of bullet (•) to separate items ( #25248 )
2023-06-02 19:58:18 +02:00
Matt Jankowski
cd4f0feab8
Extract verify options method in search cli ( #25121 )
2023-06-01 14:35:05 +02:00
Matt Jankowski
35c1c3e57a
Add CLI area progress bar helper ( #25208 )
2023-06-01 14:31:24 +02:00
Matt Jankowski
dc26140d54
Use thor methods instead of tty prompt in maintenance cli ( #25207 )
2023-05-31 19:40:16 +02:00
Matt Jankowski
1baf40077b
Fix FormatStringToken cop in CLI ( #25122 )
2023-05-30 16:21:53 +02:00
Matt Jankowski
80c7de9984
Fix Rails/WhereExists cop in CLI ( #25123 )
2023-05-30 16:09:57 +02:00
Matt Jankowski
b7b96efd17
Extract helper method for error report in cli/accounts command ( #25119 )
2023-05-30 16:09:15 +02:00
Matt Jankowski
2cecb2dc9e
Increment index which was previously not used in maintenance CLI loop ( #25118 )
2023-05-30 16:08:47 +02:00
Matt Jankowski
ec9bc7e604
Consistent usage of CLI dry_run?
method ( #25116 )
2023-05-30 16:07:44 +02:00
Matt Jankowski
55785b1603
Extract methods for user de-duping in maintenance CLI ( #25117 )
2023-05-26 09:42:16 +02:00
Claire
1d588d58f1
Improve various queries against account domains ( #25126 )
2023-05-25 09:27:16 +02:00
Matt Jankowski
384345b0de
Add CLI Base class for command line code ( #25106 )
2023-05-24 11:55:40 +02:00
Matt Jankowski
b6b4ea4ca5
Move the mastodon/*_cli files to mastodon/cli/* ( #24139 )
2023-05-23 16:08:26 +02:00
Nick Schonning
99e2e9b81f
Fix minor typos in comments and spec names ( #21831 )
2023-05-19 17:13:29 +02:00
Daniel M Brasil
536dd046d4
Add ability to block sign-ups from IP using the CLI ( #24870 )
2023-05-09 14:46:00 +02:00
Daniel M Brasil
ffb3fef7db
Fix uncaught ActiveRecord::StatementInvalid
in Mastodon::IpBlocksCLI ( #24861 )
2023-05-09 14:45:47 +02:00
Renaud Chaput
830e6cefae
Add version suffixes to nightly & edge image builds ( #24823 )
2023-05-04 13:45:39 +02:00
Nick Schonning
569b39256b
Bump rubocop-rails 2.19.1 with update .rubocop_todo.yml ( #24469 )
2023-05-04 11:56:24 +02:00
Nick Schonning
da3bd913ae
Autofix Rubocop Style/HashSyntax ( #23754 )
2023-05-04 05:54:26 +02:00
Matt Jankowski
2c6c398c60
Fix Performance/CollectionLiteralInLoop cop ( #24819 )
2023-05-04 05:33:55 +02:00
Matt Jankowski
24491abf6d
Fix Rails/DeprecatedActiveModelErrorsMethods cop ( #24742 )
2023-05-02 18:39:22 +02:00
Matt Jankowski
5e060e1f44
Fix Performance/Sum cop ( #24788 )
2023-05-02 16:10:40 +02:00
Claire
1ed0ff30d3
Fix tootctl accounts cull
crashing when encountering a domain resolving to a private address ( #23378 )
2023-05-02 15:10:09 +02:00
Matt Jankowski
88d33f361f
Fix Lint/DuplicateBranch cop ( #24766 )
2023-05-02 12:57:11 +02:00
Daniel M Brasil
e8fe941015
Fix tootctl accounts approve --number N
not aproving N earliest registrations ( #24605 )
2023-04-30 06:50:58 +02:00
Matt Jankowski
2e43461100
Fix Rails/Output cop ( #24687 )
2023-04-30 06:48:16 +02:00
Matt Jankowski
60ac9e8634
Fix Rails/SquishedSQLHeredocs cop ( #24694 )
2023-04-30 06:43:50 +02:00
Daniel M Brasil
1d9969fadf
Fix tootctl accounts create --reattach --force
not working with confirmed accounts ( #24680 )
2023-04-27 10:15:45 +02:00
Claire
528b8e7e3a
Fix crash in tootctl accounts create --reattach --force
( #24557 )
2023-04-23 22:29:31 +02:00
Daniel M Brasil
faf657d709
Fix uncaught ActiveRecord::StatementInvalid exception in Mastodon::AccountsCLI#approve
( #24590 )
2023-04-20 10:57:11 +02:00
Eugen Rochko
e98c86050a
Refactor Cache-Control
and Vary
definitions ( #24347 )
2023-04-19 16:07:29 +02:00
Daniel M Brasil
3afa1fda7a
Fix email confirmation skip option in tootctl accounts modify USERNAME --email EMAIL --confirm
( #24578 )
2023-04-18 09:51:24 +02:00
Daniel M Brasil
b0800d602e
tootctl: add --approve option to tootctl accounts create ( #24533 )
2023-04-14 14:41:15 +02:00
Matt Jankowski
a2a66300d9
Clean up the post deployment migration generator ( #24233 )
2023-04-11 11:25:29 +02:00
Claire
3d8bd093b9
Bump version to v4.1.2 ( #24427 )
2023-04-07 09:01:57 +02:00
Claire
5c499f54e3
Change root Chewy strategy to emit a warning instead of erroring out in production mode ( #24327 )
2023-04-03 15:05:39 +02:00
Alison Wheeler
2f7c3cb628
Update redis_config.rb to remove warning message ( #24352 )
2023-04-02 06:49:37 +02:00
Eugen Rochko
a9b5598c97
Change user settings to be stored in a more optimal way ( #23630 )
...
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2023-03-30 14:44:00 +02:00
Claire
0d70deee53
Add migration tests for user mail notification settings ( #24277 )
2023-03-27 17:54:42 +02:00
Matt Jankowski
b9e34ef098
Migration warning helper, and only run in production env ( #24253 )
2023-03-26 00:39:24 +01:00
Claire
7f8e1bede4
Bump version to v4.1.1 ( #24201 )
2023-03-21 15:04:21 +01:00
Claire
bdeb6ff180
Fix crash in tootctl
commands making use of parallelization when Elasticsearch is enabled ( #24182 )
2023-03-20 20:02:58 +01:00
Nick Schonning
aa947a143b
Regen rubocop-todo without Max shadowing ( #24076 )
2023-03-16 12:31:08 +09:00