Commits · 71d44949bf358421ffe2eec9ae040a3e95c79151 · Pierre Boudes / mastodon

Jul 07, 2023
- Fix processing of media files with unusual names (#25788) · 94fbac77
  Claire authored 1 year ago
  
  94fbac77
Jul 06, 2023

Merge pull request from GHSA-55j9-c3mp-6fcq · 610731b0
Claire authored 1 year ago

610731b0

Merge pull request from GHSA-9pxv-6qvf-pjwc · c5929798

Claire authored 1 year ago

* Fix timeout handling of outbound HTTP requests

* Use CLOCK_MONOTONIC instead of Time.now

c5929798

Merge pull request from GHSA-9928-3cp5-93fm · dc8f1fbd

Claire authored 1 year ago

* Fix attachments getting processed despite failing content-type validation

* Add a restrictive ImageMagick security policy tailored for Mastodon

* Fix misdetection of MP3 files with large cover art

* Reject unprocessable audio/video files instead of keeping them unchanged

dc8f1fbd

Merge pull request from GHSA-ccm4-vgcc-73hp · 6d8e0fae

Claire authored 1 year ago

* Tighten allowed HTML in oEmbed-based preview cards

* Sanitize preview cards at render time

* Add `sandbox` attribute to preview card iframes

6d8e0fae

Jul 05, 2023
- Add canonical link tags in web UI (#25715) · 000b8358
  Eugen Rochko authored 1 year ago
  
  000b8358
- Add button to see results for polls in web UI (#25726) · b7910bc7
  Eugen Rochko authored 1 year ago
  
  b7910bc7
Jul 04, 2023
- Fix OAuth apps page crashing when listing apps with certain admin API scopes (#25713) · eb2417ce
  Claire authored 1 year ago
  
  eb2417ce
- Fix re-activated accounts being deleted by AccountDeletionWorker (#25711) · 4658263b
  Claire authored 1 year ago
  
  4658263b
- fix read more button overlapping thread line bug (#25706) · 182fd93a
  Trevor Wolf authored 1 year ago
  
  182fd93a
Jul 03, 2023
- Fix local live feeds does not expand (#25694) · 62681885
  mogaminsk authored 1 year ago
  
  62681885
- Add at-symbol prepended to mention span title (#25684) · d9a5c1ac
  forsamori authored 1 year ago
  
  Co-authored-by: Sam BC <samuel.balbirnie-cumming@xdesign.com>
  d9a5c1ac
- Change labels of live feeds tabs in web UI (#25683) · 54a10523
  Eugen Rochko authored 1 year ago
  
  54a10523
- Fix `/api/v2/search` not working with following query param (#25681) · 383c0081
  Daniel M Brasil authored 1 year ago
  
  383c0081
- Fix regression of icon button colors in web UI (#25679) · 69e124e2
  Eugen Rochko authored 1 year ago
  
  69e124e2
- Change button colors to increase hover/focus contrast and consistency (#25677) · 54cb679c
  Trevor Wolf authored 1 year ago
  
  54cb679c
Jul 02, 2023
- Add users index on unconfirmed_email (#25672) · e6a8faae
  Claire authored 1 year ago
  
  e6a8faae
- Fix inefficient query when requesting a new confirmation email from a logged-in account (#25669) · 180f0e67
  Claire authored 1 year ago
  
  180f0e67
- Revert "Rails 7 update" (#25667) · ba06a2f1
  Eugen Rochko authored 1 year ago
  
  ba06a2f1
- Prevent duplicate concurrent calls of `/api/*/instance` in web UI (#25663) · 5b463454
  mogaminsk authored 1 year ago
  
  5b463454
- Change dropdown icon above compose form from ellipsis to bars in web UI (#25661) · 0512537e
  Eugen Rochko authored 1 year ago
  
  0512537e
- Rails 7 update (#24241) · 50c2a036
  Matt Jankowski authored 1 year ago
  
  50c2a036
Jul 01, 2023
- Fix HTTP 500 in `/api/v1/emails/check_confirmation` (#25595) · 4fe2d7cb
  Daniel M Brasil authored 1 year ago
  
  4fe2d7cb
- Change local and federated timelines to be in a single firehose column (#25641) · cea9db5a
  Claire authored 1 year ago
  
  cea9db5a
- Fix rails `rewhere` deprecation warning in directories api controller (#25625) · 683ba5ec
  Matt Jankowski authored 1 year ago
  
  683ba5ec
Jun 30, 2023
- Use an Immutable Record as the root state (#25584) · 78ba12f0
  Renaud Chaput authored 1 year ago
  
  78ba12f0
- Fix onboarding prompt being displayed because of disconnection gaps (#25617) · 9934949f
  Claire authored 1 year ago
  
  9934949f
Jun 29, 2023
- Fix ResolveURLService not resolving local URLs for remote content (#25637) · a209d1e6
  Claire authored 1 year ago
  
  a209d1e6
- Change account search to match by text when opted-in (#25599) · 4581a528
  jsgoldstein authored 1 year ago
  
  Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
  4581a528
Jun 28, 2023
- Remove the search button from UI header when logged out (#25631) · 285a6919
  Claire authored 1 year ago
  
  285a6919
Jun 27, 2023
- Fix suspending an already-limited domain (#25603) · c7c6f02a
  Claire authored 1 year ago
  
  c7c6f02a
- Fix batch attachment deletion leaving empty directories (#25587) · 0ccf6c0e
  Claire authored 1 year ago
  
  0ccf6c0e
Jun 26, 2023
- Remove media attachment only when file was exist (#25586) · 7a25af64
  S.H authored 1 year ago
  
  7a25af64
- Change files to be deleted in batches instead of one-by-one (#23302) · bb4756c8
  Eugen Rochko authored 1 year ago
  
  bb4756c8
- Improve dismissable banner buttons when they dont fit on 1 line (#25580) · ae30a60b
  Renaud Chaput authored 1 year ago
  
  Co-authored-by: Claire <claire.github-309c@sitedethib.com>
  ae30a60b
- Fix compose form not being shown when clicking “Make your first post” on mobile (#25581) · ed96e28c
  Claire authored 1 year ago
  
  ed96e28c
- Change header backgrounds to use fewer different colors in web UI (#25577) · 7b024baf
  Eugen Rochko authored 1 year ago
  
  7b024baf
- Fix onboarding prompt flashing while home feed is loading in web UI (#25579) · 65aa0464
  Eugen Rochko authored 1 year ago
  
  65aa0464
- Fix search not being easily findable on smaller screens in web UI (#25576) · 2b78c07e
  Eugen Rochko authored 1 year ago
  
  2b78c07e
Jun 24, 2023
- Fix verified badge in account lists potentially including rel="me" links (#25561) · 55e7c08a
  Claire authored 1 year ago
  
  55e7c08a