KMY
795561f5a7
Merge commit ' cfb473c204' into upstream-20250228
2025-02-28 11:07:08 +09:00
Claire
f5c4022a20
Change HTML sanitization to remove unusable and unused embed tag ( #34021 )
2025-02-27 10:12:58 +00:00
KMY
3784ad273c
Merge remote-tracking branch 'parent/main' into upstream-20241216
2024-12-16 10:14:31 +09:00
Eugen Rochko
425311e1d9
Change referrer policy to be controlled by header in web UI ( #33214 )
2024-12-09 22:42:45 +00:00
KMY
2d9124a3ab
Merge remote-tracking branch 'parent/main' into upstream-20241203
2024-12-03 18:03:14 +09:00
Calvin Lee
7f4858b339
Correctly sanitize MathML out of post content ( #27107 )
2024-11-28 12:02:34 +00:00
KMY
66bed31dbe
Merge remote-tracking branch 'parent/main' into upstream-20241006
2024-10-05 09:10:58 +09:00
Matt Jankowski
82e7d53d54
Rename transformer constant in sanitizer ( #30532 )
2024-10-04 08:29:23 +00:00
KMY
218cb37fe3
Merge remote-tracking branch 'parent/main' into upstream-20240906
2024-09-09 08:47:15 +09:00
Mike Dalessio
10143d053a
Change some instances of Nokogiri HTML4 parsing to HTML5 ( #31812 )
2024-09-08 18:41:37 +00:00
KMY
e7ccc0539f
Merge remote-tracking branch 'parent/main' into upstream-20240813
2024-08-13 07:01:38 +09:00
Django
709dcd07f2
Add support for incoming <s> tag ( #31375 )
2024-08-12 11:10:05 +00:00
KMY
9a07550fa6
Merge remote-tracking branch 'parent/main' into upstream-20240705
2024-07-05 07:22:34 +09:00
Emelia Smith
47f0faebc9
Implement HTML ruby tags for east-asian languages ( #30897 )
2024-07-03 20:05:59 +00:00
KMY
08f86bcb8f
Merge commit ' 389a6cc4c0' into upstream-20231108
2023-11-08 10:41:10 +09:00
Matt Jankowski
2d39268bc5
Fix Lint/OrAssignmentToConstant cop ( #27750 )
2023-11-07 09:11:50 +00:00
KMY
2a813d517d
Merge commit ' eaa1f9e450' into kb_migration
2023-07-07 07:20:37 +09:00
KMY
82338ded9f
Bump version to v4.1.3 ( #25757 )
2023-07-06 23:09:32 +09:00
Claire
6d8e0fae3e
Merge pull request from GHSA-ccm4-vgcc-73hp
...
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
KMY
f8cd77b8b1
Merge commit ' 69db507924' into kb_migration
2023-06-22 17:39:55 +09:00
Claire
c78280a8ce
Add translate="no" to outgoing mentions and links ( #25524 )
2023-06-20 18:10:19 +02:00
KMY
3a1a6ba39e
Merge commit ' 15fd712464' into kb_migration
2023-05-01 15:05:34 +09:00
KMY
f2e0d5b634
Fix activitypub link href checker to ignore no-url
2023-03-21 22:09:38 +09:00
KMY
dcf52daa9b
Debug phising code
2023-03-07 12:23:09 +09:00
KMY
a5c3cb4b42
Fix phising bug
2023-03-07 12:11:54 +09:00
KMY
1f52db67aa
Fix to counter phising attacks from misskey
2023-03-07 12:01:59 +09:00
Claire
3c3da81352
Add support for incoming rich text ( #23913 )
2023-03-05 21:15:46 +09:00
Claire
3a6451c867
Add support for incoming rich text ( #23913 )
2023-03-03 20:19:29 +01:00
Nick Schonning
717683d1c3
Autofix Rubocop remaining Layout rules ( #23679 )
2023-02-20 06:58:28 +01:00
Nick Schonning
2177daeae9
Autofix Rubocop Style/RedundantBegin ( #23703 )
2023-02-19 07:09:40 +09:00
Claire
15b88a83ab
Fix sanitizer parsing link text as HTML when stripping unsupported links ( #22558 )
2023-01-11 22:21:10 +01:00
Claire
a4dcaef53b
Prepare Mastodon for zeitwerk autoloader ( #15917 )
...
* Prepare Mastodon for zeitwerk autoloader (Rails 6)
Add inflections and rename/move a few classes.
In particular, app/lib/exceptions.rb and app/lib/sanitize_config.rb
were manually loaded while still in autoload paths.
* Add inflection for Url → URL
2021-03-19 02:42:43 +01:00
