Claire 4fb4721072

Merge pull request from GHSA-58x8-3qxw-6hm7 ...

* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`

2024-07-04 16:26:49 +02:00

..

activitypub

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

admin

Fix missing destory audit logs for Domain Allows (#30125)

2024-05-17 12:30:00 +02:00

api

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

auth

Fix user creation failure handling in OAuth paths (#29207)

2024-02-14 22:55:31 +01:00

concerns

Remove caching in cache_collection (#29862)

2024-05-17 12:30:00 +02:00

disputes

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

filters

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

oauth

Merge pull request from GHSA-vp5r-5pgw-jwqx

2024-07-04 16:11:28 +02:00

settings

Add new public status index (#26344)

2023-08-24 16:40:04 +02:00

well_known

Add fallback redirection when getting a webfinger query WEB_DOMAIN@WEB_DOMAIN (#28592)

2024-05-17 12:30:00 +02:00

about_controller.rb

Change logged-out WebUI HTML pages to be cached for a few seconds (#24708)

2023-04-28 10:27:26 +02:00

accounts_controller.rb

Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)

2023-08-02 19:32:48 +02:00

application_controller.rb

Add authorized_fetch server setting in addition to env var (#25798)

2023-09-01 15:41:10 +02:00

authorize_interactions_controller.rb

Change interaction modal in web UI (#26075)

2023-07-27 16:11:17 +02:00

backups_controller.rb

Storage: add :azure to remaining callers (#26080)

2023-07-27 16:13:45 +02:00

custom_css_controller.rb

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

emojis_controller.rb

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

filters_controller.rb

Fix Rails/ActionOrder cop (#24692)

2023-04-30 06:46:39 +02:00

follower_accounts_controller.rb

Fix Vary headers not being set on some redirects (#27272)

2023-10-10 13:52:41 +02:00

following_accounts_controller.rb

Fix Vary headers not being set on some redirects (#27272)

2023-10-10 13:52:41 +02:00

health_controller.rb

Change health check (#15988)

2021-04-03 02:39:04 +02:00

home_controller.rb

Change logged-out WebUI HTML pages to be cached for a few seconds (#24708)

2023-04-28 10:27:26 +02:00

instance_actors_controller.rb

Fix /actor needlessly reading session cookie and varying on Signature (#24664)

2023-04-26 11:42:26 +02:00

intents_controller.rb

Fix Performance/DeletePrefix cop (#24796)

2023-05-02 21:07:45 +02:00

invites_controller.rb

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

mail_subscriptions_controller.rb

Add List-Unsubscribe email header (#26085)

2023-08-01 19:34:40 +02:00

manifests_controller.rb

Fix some user-independent endpoints potentially reading session cookies (#24650)

2023-04-25 22:14:44 +02:00

media_controller.rb

Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)

2023-08-02 19:32:48 +02:00

media_proxy_controller.rb

Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)

2023-08-02 19:32:48 +02:00

privacy_controller.rb

Change logged-out WebUI HTML pages to be cached for a few seconds (#24708)

2023-04-28 10:27:26 +02:00

relationships_controller.rb

Fix call to inefficient delete_matched cache method in domain blocks (#28367)

2023-12-19 11:27:37 +01:00

remote_interaction_helper_controller.rb

Change interaction modal in web UI (#26075)

2023-07-27 16:11:17 +02:00

shares_controller.rb

Fix blurhash and autoplay not working on public pages (#11585)

2019-08-16 19:15:05 +02:00

statuses_cleanup_controller.rb

Refactor Cache-Control and Vary definitions (#24347)

2023-04-19 16:07:29 +02:00

statuses_controller.rb

Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)

2023-08-02 19:32:48 +02:00

tags_controller.rb

Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252)

2023-08-02 19:32:48 +02:00