Commit graph

2632 commits

Author SHA1 Message Date
Claire
21b716db12 Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-05 07:10:33 +09:00
Claire
ca1e2e6131 Merge pull request from GHSA-vp5r-5pgw-jwqx
* Fix streaming sessions not being closed when revoking access to an app

* Add tests for GHSA-7w3c-p9j8-mq3x
2024-07-05 07:07:56 +09:00
Daniel M Brasil
e29c435011 fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584) 2024-07-05 07:05:03 +09:00
David Roetzel
650875a820 Improve encoding detection for link cards (#30780) 2024-07-05 07:04:42 +09:00
KMY
0370a72dbd Add size limit for link preview URLs (#30854) 2024-07-05 07:03:49 +09:00
KMY
f3ac508cf7 Fix /admin/accounts/:account_id/statuses/:id for edited posts with media attachments (#30819) 2024-07-05 06:56:14 +09:00
Claire
1e2f401c98 Fix duplicate @context attribute in user export (#30653) 2024-07-05 06:44:41 +09:00
KMY
0bd26af2dd Fix: 絵文字リアクションに厳しいレートリミットが適用される問題 2024-06-02 11:19:00 +09:00
Claire
993bae2850 Merge pull request from GHSA-q3rg-xx5v-4mxh 2024-05-30 23:35:11 +09:00
Claire
4bfcf0d3f0 Merge pull request from GHSA-5fq7-3p3j-9vrf 2024-05-30 23:35:03 +09:00
Emelia Smith
8e788e260e Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-05-30 23:34:50 +09:00
KMY
5ba5aa5c5c Normalize language code of incoming posts (#30403) 2024-05-30 23:33:59 +09:00
KMY
ec7b51504b Merge remote-tracking branch 'parent/main' into kb_development 2024-04-27 08:42:37 +09:00
Claire
91ca90e25b
Fix Idempotency-Key ignored when scheduling a post (#30084) 2024-04-26 13:19:02 +00:00
Claire
e845594878
Fix moderator account being exposed in account moderation notification (#30082) 2024-04-26 12:42:06 +00:00
KMY
c4017eb993 Merge remote-tracking branch 'parent/main' into upstream-20240426 2024-04-26 09:16:08 +09:00
Claire
4ef0b48b95
Add in-app notifications for moderation actions/warnings (#30065) 2024-04-25 17:26:05 +00:00
KMY
32a8f367a3 Merge remote-tracking branch 'parent/main' into upstream-20240424 2024-04-24 08:57:07 +09:00
Emelia Smith
049b159beb
Add read:me OAuth 2.0 scope, allowing more limited access to user data (#29087) 2024-04-23 11:47:00 +00:00
KMY(雪あすか)
f29f3c5c85
Add: fep-e232引用仕様 (#725)
* Add: fep-e232引用仕様

* Fix test
2024-04-23 19:48:16 +09:00
Matt Jankowski
a15139bc02
Fix intermittent order based failure in UpdateStatusService spec (#30008) 2024-04-22 08:30:38 +00:00
KMY
d0890cc8a7 Remove rspec-retry 2024-04-22 13:07:42 +09:00
KMY
44f4a93430 Merge remote-tracking branch 'parent/main' into upstream-20240422 2024-04-22 08:58:37 +09:00
Matt Jankowski
f5d341382e
Add any_args to have_enqueued_sidekiq_job call (quiets deprecation) (#29999) 2024-04-19 19:44:59 +00:00
KMY(雪あすか)
389ae9d339
Refactor: インスタンスで利用可能な機能を検出する処理 (#721) 2024-04-19 09:04:45 +09:00
Matt Jankowski
11e0049b08
Use enum-generated scopes/queries for BulkImport (#29975) 2024-04-18 10:13:35 +00:00
KMY(雪あすか)
f79fb3adae
Add: #483 特定の公開範囲を無効にするオプション (#712)
* Add: #483 特定の公開範囲を無効にするオプション

* Fix test partically

* Complete
2024-04-18 12:40:18 +09:00
Claire
8bece467f8
Change have_enqueued_sidekiq_job usage to always make argument expectations explicit (#29974) 2024-04-17 11:13:52 +00:00
Matt Jankowski
650c548c31
Add not_featured_by scope to Tag (#28815) 2024-04-17 10:05:38 +00:00
Matt Jankowski
9ce2db4136
Combine double subject runs and DRY up change check in bulk import service spec (#29402) 2024-04-17 08:23:25 +00:00
Matt Jankowski
6fed108703
Use Rails upsert to generate update_count! query in Counters concern (#28738)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2024-04-17 08:16:51 +00:00
KMY
51cf7b3eb4 Merge remote-tracking branch 'parent/main' into upstream-20240417 2024-04-17 12:51:32 +09:00
KMY(雪あすか)
1c054ed3a3
Add: #699 引用・参照対応サーバーをAPIで取得 (#711)
* Add: #699 引用・参照対応サーバーをAPIで取得

* Complete

* ごめん
2024-04-16 12:58:54 +09:00
Matt Jankowski
7fed4a9740
Pull out repeated setup to shared setup in statusus/show view spec (#29927) 2024-04-15 15:24:31 +00:00
Matt Jankowski
61d108f415
Extract header_tags method in statuses/show view spec (#29907) 2024-04-12 09:50:46 +00:00
Matt Jankowski
da6b9238f5
Expand coverage for admin/metrics/measure/* classes (#29914) 2024-04-12 09:38:24 +00:00
Matt Jankowski
ec5a0e0f5e
Expand coverage for admin/metrics/dimension/* classes (#29913) 2024-04-12 09:18:35 +00:00
KMY
b7f3cba9b4 Merge remote-tracking branch 'parent/main' into upstream-20240412 2024-04-12 08:40:08 +09:00
Matt Jankowski
449f99e168
Fix repeated concat output buffer duplicating layout markup (#29918) 2024-04-11 23:37:07 +00:00
Matt Jankowski
576554b19b
Use fabrication sequence in domain values (#29895) 2024-04-11 08:59:01 +00:00
KMY
52c5784910 Merge remote-tracking branch 'parent/main' into upstream-20240409 2024-04-09 12:15:51 +09:00
KMY(雪あすか)
44af34f306
Fix: #703 NGワード、センシティブワード「無関係なフォロワーへのメンション」が、自分自身へのメンションにも適用される (#704) 2024-04-09 09:02:50 +09:00
Matt Jankowski
285f63c02e
Use composable query in User.active scope (#29775) 2024-04-08 13:53:49 +00:00
Claire
babbf6017d
Remove caching in cache_collection (#29862) 2024-04-08 13:46:13 +00:00
KMY
45c5c7b055 Merge remote-tracking branch 'parent/main' into upstream-20240408 2024-04-08 07:44:47 +09:00
Claire
e73cf356d2
Move OAuth flow tests from feature tests to system tests (#29837) 2024-04-05 16:52:05 +00:00
Matt Jankowski
b61ae28f8d
Separate methods for theme style and meta color tags (#29802) 2024-04-05 09:52:43 +00:00
Matt Jankowski
59da591d13
Improve spec for dimension/languages admin metric (#29842) 2024-04-05 08:54:11 +00:00
Claire
38b9d31f63
Improve email address validation (#29838) 2024-04-05 07:48:45 +00:00
Claire
1f11aa5f04
Add stub for trending tags in user mailer spec (#29850) 2024-04-05 07:48:07 +00:00