1
0
Commit Graph

2152 Commits

Author SHA1 Message Date
Jaehong Kang 04075ee0be enhance(backend): Implementation of HTTP header and body validation to fix SIF-2023-002 (#12334)
Using Buffer instead of string

Co-authored-by: perillamint <perillamint@silicon.moe>
2023-11-15 11:13:34 +09:00
zyoshoka aa6d0d4359 fix(backend): 非公開の投稿に対して返信できないように (#12333)
* fix(backend): 非公開の投稿に対して返信できないように

* Update CHANGELOG.md

* fix: test
2023-11-15 11:10:45 +09:00
syuilo 65c5626b65 Merge pull request from GHSA-3f39-6537-3cgc
This commit implements HTTP header and body validation to fix
[SIF-2023-002](https://advisory.silicon.moe/advisory/sif-2023-002/)

Signed-off-by: perillamint <perillamint@silicon.moe>
Co-authored-by: perillamint <perillamint@silicon.moe>
Co-authored-by: yunochi <yuno@yunochi.com>
2023-11-14 17:09:45 +09:00
syuilo 2d2eefe3d4 feat: メールアドレスを使用してユーザー名を割り出す機能
Resolve #10158
2023-11-14 07:58:18 +09:00
Mar0xy e4bd74183f chore: remove type in DbNoteImportToDbJobData 2023-11-13 13:09:21 +01:00
Mar0xy 6f76a3a1f8 upd: import replies to own posts on *key 2023-11-13 13:07:49 +01:00
Mar0xy 9b3993a652 fix: prevent *key renotes/boosts from being imported
Stop renotes/boosts from *key from being imported due to missing functionality of getting the related posts
2023-11-13 10:25:39 +01:00
おさむのひと e1cc95d308 ユーザのノートのみ表示時にDBへフォールバックするとリノートを含んでしまうのを修正 (#12321)
* ユーザのノートのみ表示時にDBへフォールバックするとリノートを含んでしまうのを修正

* fix CHANGELOG.md

---------

Co-authored-by: osamu <46447427+sam-osamu@users.noreply.github.com>
2023-11-13 09:27:37 +09:00
Mar0xy 6170461dc5 upd: add additional checks for akkoma and pleroma 2023-11-12 22:27:20 +01:00
Mar0xy 5c38e6b824 add: custom like emoji per instance, fix like
This fixes the fact that likes on mastodon didn't get federated properly and let's instance admins choose a custom emoji
2023-11-12 22:16:47 +01:00
Mar0xy 1f8c12b984 fix: use a proper function 2023-11-12 18:19:44 +01:00
Mar0xy 8cad8f0ae5 fix: broken unicode in strings on IG imports 2023-11-12 18:12:39 +01:00
Mar0xy 486a2ad839 upd: remove unused function, fix logger message 2023-11-12 18:01:39 +01:00
Mar0xy bc25b28a4e fix: cleanup not available on development env 2023-11-12 17:32:24 +01:00
Mar0xy b7fc13efb7 upd: pass full thinuser 2023-11-12 15:48:28 +01:00
Mar0xy 2d1e8ee44d upd: update limit 2023-11-12 15:37:36 +01:00
Mar0xy de9ea4d9f1 fix: type 2023-11-12 15:16:27 +01:00
Mar0xy 83f328de8a add: Importing of Posts
- Supports Instagram, Mastodon/Pleroma/Akkoma, Twitter and *key
2023-11-12 15:12:42 +01:00
Mar0xy 4f0e0f067e upd: set file user to system when adding emoji
Prevents cluttering of user's drive and fits the custom emoji import which sets the user as system
2023-11-12 14:00:35 +01:00
atsuchan 50430e310a Fix: latestRequestReceivedAt (#12270) 2023-11-11 14:51:29 +09:00
Mar0xy d94b1c3fe0 chore: lint 2023-11-09 15:07:23 +01:00
Mar0xy 885800ee5e revert: deletion of oauth.pug 2023-11-09 15:06:57 +01:00
Mar0xy fdb36f1d96 fix: oauth/authorize and token showing error page 2023-11-09 15:00:38 +01:00
Mar0xy fd51854670 revert: trending support for redis 6.3
It seems this change has caused redis to periodically crash on big instances
2023-11-09 14:51:19 +01:00
GrapeApple0 28e394eddc fix: 投稿通知がオンでもダイレクト投稿はユーザーに通知されないように (#12263)
* fix: 投稿通知がオンでもダイレクト投稿はユーザーに通知されないように

* Update CHANGELOG.md
2023-11-09 21:35:07 +09:00
Nya Candy e2cac3d949 fix: show real instance url (#12273)
* Update CHANGELOG.md

* fix: show real instance url

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
Co-authored-by: atsuchan <83960488+atsu1125@users.noreply.github.com>
Co-authored-by: Masaya Suzuki <15100604+massongit@users.noreply.github.com>
Co-authored-by: Kagami Sascha Rosylight <saschanaz@outlook.com>
Co-authored-by: taiy <53635909+taiyme@users.noreply.github.com>
Co-authored-by: xianon <xianon@hotmail.co.jp>
Co-authored-by: kabo2468 <28654659+kabo2468@users.noreply.github.com>
Co-authored-by: YS <47836716+yszkst@users.noreply.github.com>
Co-authored-by: Khsmty <me@khsmty.com>
Co-authored-by: Soni L <EnderMoneyMod@gmail.com>
Co-authored-by: mei23 <m@m544.net>
Co-authored-by: daima3629 <52790780+daima3629@users.noreply.github.com>
Co-authored-by: Windymelt <1113940+windymelt@users.noreply.github.com>
Co-authored-by: Ebise Lutica <7106976+EbiseLutica@users.noreply.github.com>
Co-authored-by: nenohi <kimutipartylove@gmail.com>
Co-authored-by: Acid Chicken (硫酸鶏) <root@acid-chicken.com>
Co-authored-by: rinsuki <428rinsuki+git@gmail.com>
Co-authored-by: FineArchs <133759614+FineArchs@users.noreply.github.com>
2023-11-09 21:21:39 +09:00
Mar0xy 49e3a31bba fix: not starting due to duplicate endpoint 2023-11-08 22:55:18 +01:00
Mar0xy 0087bc3ace test: oauth/authorize on api endpoint 2023-11-08 22:45:40 +01:00
Mar0xy c5008452c1 fix: oauth/authorize not working 2023-11-08 22:18:28 +01:00
Mar0xy 88da6f16a9 upd: add oauth decision endpoint 2023-11-08 21:11:54 +01:00
zyoshoka 2834e54e78 fix(backend): make token nullable (#12280) 2023-11-08 21:10:41 +09:00
Mar0xy 04657c14c7 upd: remove leftover nsfw ai option 2023-11-07 19:23:58 +01:00
Mar0xy 9cd2759769 feat: isIndexable 2023-11-07 19:16:57 +01:00
Mar0xy 53f2089116 fix: lastReceivedAt always being N/A 2023-11-07 18:30:04 +01:00
Mar0xy ccd3789cc6 fix: plugin uninstall throwing error 2023-11-07 18:22:52 +01:00
Mar0xy d85cf658ca upd: export headers used during signin 2023-11-07 18:18:04 +01:00
Mar0xy 42a5d473e5 upd: remove remaining parts of tw 2023-11-07 17:10:27 +01:00
Mar0xy 42ecde475e upd: add IPs to data export 2023-11-07 12:20:46 +01:00
Mar0xy fabb876256 upd: send email on export completion 2023-11-07 11:31:11 +01:00
Mar0xy e9b6ed941b add: endpoint and processor for account data export 2023-11-07 03:31:47 +01:00
Marie ecf63c4333 merge: remove tensorflow, AiService (#140) 2023-11-05 14:42:15 +01:00
ShittyKopper 36c136cfd2 upd: remove more traces of sensitiveMediaDetection
kept the api endpoint props just to stay compatible with clients that
expect them to be there. they are unused and won't get saved
2023-11-05 16:28:55 +03:00
Mar0xy e50ac8ccc7 fix: withreplies not being applied to DB fallback 2023-11-05 13:25:35 +01:00
Mar0xy 35b3ac228c merge: upstream 2023-11-05 11:19:03 +01:00
ShittyKopper 2eda00d9b9 upd: rip out AiService 2023-11-05 11:55:19 +03:00
Marie 2cce28533f fix(backend): isBot not being set on Application type (#12248)
* fix: bot not being set on all relays

* updatePerson missing the change

* chore: replace wrong word with correct word
2023-11-05 10:22:10 +09:00
syuilo c2ddb649f8 enhance: 非通知なお知らせを作成できるように 2023-11-05 09:04:38 +09:00
syuilo bdbb3266ae fix(backend): アーカイブしたお知らせがコントロールパネルに表示される問題を修正 2023-11-05 09:04:03 +09:00
Mar0xy 647e76ab36 merge: upstream 2023-11-04 14:32:28 +01:00
ozelot 1e737dbb94 fix(backend): GTLの「リノートを表示」オプションが機能しないのを修正 (#12234)
* fix(backend): GTLの「リノートを表示」オプションが機能しないのを修正 (#12233)

* docs: Update changelog

* Apply suggestions from code review

Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>

---------

Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-11-04 18:45:59 +09:00