Commit graph

482 commits

Author SHA1 Message Date
KMY
3ab66262de Merge commit 'a02ff33f0e' into kb-draft-5.22-lts 2024-08-16 22:15:12 +09:00
Claire
a5641a9244 Fix incorrect rate limit on PUT requests (#31356) 2024-08-16 12:30:59 +02:00
KMY
6896542a76 Merge commit 'a5b4a2b7e7' into kb-draft-5.21-lts 2024-07-05 06:40:30 +09:00
Tim Rogers
17f69c0002 Added check for STATSD_ADDR setting to emit a warning and proceed rather than crashing if the address is unreachable (#30691) 2024-07-02 15:08:24 +02:00
KMY
e511b02de5 Fix: 絵文字リアクションに厳しいレートリミットが適用される問題 2024-06-02 11:18:01 +09:00
KMY
c2a19f8a81 Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.19-lts 2024-05-30 23:25:06 +09:00
Claire
9740c7eaea Fix rate-limiting incorrectly triggering a session cookie on most endpoints (#30483) 2024-05-30 15:14:03 +02:00
Claire
8ab0ca7d64
Merge pull request from GHSA-c2r5-cfqr-c553
* Add hardening monkey-patch to prevent IP spoofing on misconfigured installations

* Remove rack-attack safelist
2024-05-30 14:24:29 +02:00
Claire
7920aa59e8
Merge pull request from GHSA-q3rg-xx5v-4mxh 2024-05-30 14:14:04 +02:00
Emelia Smith
186f916192 Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-29 16:39:26 +02:00
Tim Rogers
e69780ec59 Fixed crash when supplying FFMPEG_BINARY environment variable (#30022) 2024-05-17 12:30:00 +02:00
KMY
9190f53d7b Merge commit '7c8ca0c6d6' into kb-draft-5.16-lts 2024-02-15 08:15:29 +09:00
Emelia Smith
6d43b63275 Disable administrative doorkeeper routes (#29187) 2024-02-14 11:03:21 +01:00
KMY
9310c1c81b Merge remote-tracking branch 'parent/stable-4.2' into upstream-4.2.2-lts 2023-12-05 09:05:29 +09:00
Claire
ef149674f0 Change Content-Security-Policy to be tighter on media paths (#26889) 2023-12-04 15:28:15 +01:00
KMY
d16158dbda Merge commit '8acc75435b' into kb_lts 2023-09-21 22:06:02 +09:00
Claire
8acc75435b
Change S3 checksum mode to be disabled by default (#27007) 2023-09-21 14:00:51 +02:00
KMY
3b290ef958 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-15 10:21:33 +09:00
Claire
a04ae16201
Fix CSP when using ONE_CLICK_SSO_LOGIN (#26901) 2023-09-13 19:54:04 +02:00
KMY
fbb1a69a65 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-13 22:08:20 +09:00
CSDUMMI
9a70cac9de
Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857) 2023-09-12 13:04:51 +02:00
KMY
e9de561a24 Merge branch 'kb_development' into kb_migration 2023-09-10 15:56:32 +09:00
KMY
0a844ccdc7 Add dtl settings 2023-09-06 17:42:58 +09:00
KMY
93faae7b63 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-04 21:21:04 +09:00
KMY
751b603e12 Merge branch 'kb_development' into kb_migration 2023-09-04 21:16:30 +09:00
Christian Schmidt
ea31929776
Fix invalid Content-Type header for WebP images (#26773) 2023-09-04 09:46:33 +02:00
KMY
1a11680704 Remove google ad tags 2023-09-03 22:33:43 +09:00
KMY
32cfd20257 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-03 10:55:46 +09:00
Claire
9e26cd5503
Add authorized_fetch server setting in addition to env var (#25798) 2023-09-01 15:41:10 +02:00
KMY
59217c521e Merge remote-tracking branch 'parent/main' into kb_migration 2023-08-30 08:39:20 +09:00
Christian Schmidt
286a21afdc
Support webpacker live-reloading on Docker (#26419) 2023-08-29 10:17:57 +02:00
KMY
d1a76ea317 Merge remote-tracking branch 'parent/main' into kb_migration 2023-08-20 08:37:27 +09:00
Renaud Chaput
b95867ad1f
Allow setting a custom HTTP method in CacheBuster (#26528)
Co-authored-by: Jorijn Schrijvershof <jorijn@jorijn.com>
2023-08-18 08:18:40 +02:00
KMY
c324dc5c90 Merge commit 'dd049fc37a' into kb_migration 2023-08-15 18:20:35 +09:00
KMY
61e4be24e1 Merge commit '3a8370e1f4' into kb_migration 2023-08-15 17:58:03 +09:00
Claire
dd049fc37a
Fix ES_PRESET not being applied to Chewy's internal index (#26489) 2023-08-14 19:00:56 +02:00
Claire
f5778caa3a
Add ES_PRESET option to customize numbers of shards and replicas (#26483)
Co-authored-by: Eugen Rochko <eugen@zeonfederated.com>
2023-08-14 17:46:16 +02:00
KMY
69555645d9 Merge remote-tracking branch 'parent/main' into kb_migration 2023-08-11 11:10:49 +09:00
Claire
4bc0dd751c
Add S3_DISABLE_CHECKSUM_MODE environment variable for compatibility with some S3-compatible providers (#26435) 2023-08-10 14:15:18 +02:00
KMY
ce3cf82f8f Merge remote-tracking branch 'parent/main' into kb_migration 2023-08-07 22:10:24 +09:00
Claire
12c43e4ab5
Re-add StatsD support through the nsa gem (#26310) 2023-08-03 20:28:14 +02:00
KMY
82d61dad96 Merge commit '2f932cb2bb' into kb_migration 2023-08-03 15:48:07 +09:00
Emelia Smith
e258b4cb64
Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00
KMY
287eacf5f3 Merge commit 'fd284311e7' into kb_migration 2023-08-01 17:59:16 +09:00
Matt Jankowski
ad81be6c8e
Update rubocop rules for linelength (#26190) 2023-07-28 23:11:45 +02:00
Matt Jankowski
bada7a65aa
Ignore long line in regex initializer (#26182) 2023-07-26 09:45:27 +02:00
KMY
4b65740722 Merge commit 'f826a95f6e' into kb_migration 2023-07-25 15:09:10 +09:00
Claire
e5f1000ad1
Fix CSP headers being unintendedly wide (#26105) 2023-07-21 13:34:15 +02:00
Claire
934c7b33d1
Change default KeyGenerator digest to SHA1 to fix cookies in rolling upgrades (#26023) 2023-07-21 13:17:43 +02:00
KMY
152b8eb4e6 Merge commit '42698b4c5c' into kb_migration 2023-07-21 18:40:40 +09:00