Eugen Rochko b1349342d2

Fix rendering <a> without href when scheme unsupported (#13040) ...

- Disallow links with relative paths
- Disallow iframes with non-http protocols and relative paths

Close #13037

2020-02-08 21:22:38 +01:00

..

activitypub

Clarify keyword arguments with ** (#12769)

2020-01-11 05:57:05 +09:00

connection_pool

Add request pool to improve delivery performance (#10353)

2019-07-02 00:34:38 +02:00

nodeinfo

Add a nodeinfo endpoint (#12002)

2019-09-29 21:31:51 +02:00

ostatus

Remove Atom feeds and old URLs in the form of GET /:username/updates/:id (#11247)

2019-07-07 16:16:51 +02:00

proof_provider

Default to the web domain (eg. mastodon.lubar.me) instead of the local domain (eg. lubar.me) for keybase proofs (#10565)

2019-04-21 04:53:24 +02:00

settings

add admin setting for default search engine indexing (fix #11750) (#11804)

2019-09-11 08:44:58 +02:00

activity_tracker.rb

Add a nodeinfo endpoint (#12002)

2019-09-29 21:31:51 +02:00

application_extension.rb

Conditional validations no longer accept strings for if/unless (#3124)

2017-05-19 03:11:23 +02:00

delivery_failure_tracker.rb

After 7 days of repeated delivery failures, give up on inbox (#5131)

2017-09-29 03:16:20 +02:00

entity_cache.rb

Add announcements (#12662)

2020-01-23 22:00:13 +01:00

exceptions.rb

Detect and prevent image bombs, max. processable dimension 4096^2 (#7229)

2018-04-23 09:16:38 +02:00

extractor.rb

Using double splat operator (#5859)

2017-12-06 11:41:57 +01:00

fast_geometry_parser.rb

Fix avatar and header issues by using custom geometry detector (#6515)

2018-02-21 03:40:12 +01:00

feed_manager.rb

Add streaming API updates for announcements being modified or deleted (#12963)

2020-01-26 20:07:26 +01:00

formatter.rb

Fix malformed HTML causing uncaught error (#13042)

2020-02-07 15:24:22 +01:00

hash_object.rb

Migrate from ledermann/rails-settings to rails-settings-cached which allows global settings

2017-01-12 20:46:24 +01:00

inline_renderer.rb

Add announcements (#12662)

2020-01-23 22:00:13 +01:00

language_detector.rb

Update ESLint and RuboCop in Code Climate (#12534)

2019-12-02 18:25:43 +01:00

potential_friendship_tracker.rb

Create Redisable#redis (#9633)

2019-02-02 19:11:38 +01:00

proof_provider.rb

Add Keybase integration (#10297)

2019-03-18 21:00:55 +01:00

request_pool.rb

Add request pool to improve delivery performance (#10353)

2019-07-02 00:34:38 +02:00

request.rb

Fix Ruby 2.7 support (#12831)

2020-01-12 15:49:30 +01:00

rss_builder.rb

Add RSS feeds for end-users (#7259)

2018-04-25 02:10:02 +02:00

sanitize_config.rb

Fix rendering <a> without href when scheme unsupported (#13040)

2020-02-08 21:22:38 +01:00

search_query_parser.rb

Fix accounts search by full/partial display name and others (#11580)

2019-08-16 13:00:30 +02:00

search_query_transformer.rb

Fix error when searching for empty phrase (#12711)

2019-12-30 18:30:24 +01:00

sidekiq_error_handler.rb

Fix statsd UDP sockets not being cleaned up in Sidekiq (#11230)

2019-07-02 01:01:17 +02:00

spam_check.rb

Exempt staff members from spam check (#12874)

2020-01-17 07:50:30 +01:00

status_filter.rb

Fix n+1 queries in StatusThreadingConcern (#7321)

2018-05-03 10:41:58 +02:00

status_finder.rb

Remove Atom feeds and old URLs in the form of GET /:username/updates/:id (#11247)

2019-07-07 16:16:51 +02:00

tag_manager.rb

Refactor domain block checks (#11268)

2019-07-09 03:27:35 +02:00

themes.rb

Add support for multiple themes (#4959)

2017-09-19 16:36:23 +02:00

toc_generator.rb

Add fallback section ID with ToC (#11941)

2019-09-23 17:25:10 +02:00

user_settings_decorator.rb

Add setting for whether to crop images in unexpanded toots (#12126)

2019-10-24 22:51:41 +02:00

webfinger_resource.rb

Add ActivityPub actor representing the entire server (#11321)

2019-07-19 01:44:42 +02:00