Commit graph

1649 commits

Author SHA1 Message Date
Claire
f0a1dc1f1e Fix user creation failure handling in OAuth paths (#29207) 2024-02-15 08:54:59 +09:00
KMY
9190f53d7b Merge commit '7c8ca0c6d6' into kb-draft-5.16-lts 2024-02-15 08:15:29 +09:00
Claire
f1700523f1
Merge pull request from GHSA-vm39-j3vx-pch3
* Prevent different identities from a same SSO provider from accessing a same account

* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`

* Rename methods to avoid confusion between OAuth and OmniAuth
2024-02-14 15:16:07 +01:00
KMY
088c8482ff Fix: リモートからの参照を無限に受け入れる問題 2024-02-02 09:19:01 +09:00
KMY
8a306337e5 Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.15-lts 2024-02-02 07:34:42 +09:00
Claire
a6641f828b
Merge pull request from GHSA-3fjr-858r-92rw
* Fix insufficient origin validation

* Bump version to v4.2.5
2024-02-01 15:56:46 +01:00
KMY
1d42b6b82f Merge remote-tracking branch 'parent/stable-4.2' into kb-draft-5.14-lts 2024-01-25 07:45:24 +09:00
Claire
6fe2a47357 Add rate-limit of TOTP authentication attempts at controller level (#28801) 2024-01-24 15:31:13 +01:00
Claire
3837ec2227 Fix Mastodon not correctly processing HTTP Signatures with query strings (#28476) 2024-01-24 15:31:13 +01:00
Claire
c0a9db3611 Fix potential redirection loop of streaming endpoint (#28665) 2024-01-24 15:31:13 +01:00
Claire
01caa18e5b Fix streaming API redirection ignoring the port of streaming_api_base_url (#28558) 2024-01-24 15:31:13 +01:00
KMY
4a5f0f9259 Remove: reject_send_mediaも削除 2024-01-11 08:32:59 +09:00
KMY
5ba8141df9 Remove: #372 削除予定のドメインブロック項目をいったん削除 2024-01-10 18:46:14 +09:00
KMY
7edb05337e Add: #437 ドメインブロックで「未ログインユーザーに非公開」の設定を「非公開」にコピーするマイグレーションコード 2024-01-09 13:09:23 +09:00
KMY
267e9cbcc8 Remove: #429 ドメインブロックの「未ログインユーザーに非公開にする」オプション 2024-01-07 16:02:41 +09:00
Claire
d7875adad2
Fix call to inefficient delete_matched cache method in domain blocks (#28367) 2023-12-19 11:27:37 +01:00
KMY(雪あすか)
e8b6c16b52 Merge pull request from GHSA-qg32-3vrh-w6mw 2023-12-15 09:43:03 +09:00
KMY
9310c1c81b Merge remote-tracking branch 'parent/stable-4.2' into upstream-4.2.2-lts 2023-12-05 09:05:29 +09:00
Claire
700ae1f918 Fix report processing notice not mentioning the report number when performing a custom action (#27442) 2023-12-04 15:28:15 +01:00
KMY(雪あすか)
c2f0960e3f Change: #52 購読拒否設定項目を追加設定画面に移動 (#112) 2023-10-15 12:51:16 +09:00
Claire
ffcf2c691e Fix Vary headers not being set on some redirects (#27272) 2023-10-10 13:52:41 +02:00
KMY
2c0aa43c7d Merge branch 'kb-emergency-release-5.3-lts' into kb-draft-5.3-lts 2023-10-08 18:50:16 +09:00
KMY
f347df4e4c Fix: 参照で非公開投稿が見えてしまう問題 2023-10-08 18:49:45 +09:00
KMY
c14420edce Merge remote-tracking branch 'parent/releases/v4.2.1' into kb-draft-5.3-lts 2023-10-06 21:37:32 +09:00
Claire
b6d61118e4 Fix Vary headers not being set on some redirects (#27272) 2023-10-06 13:33:04 +02:00
KMY
31d2eb7a4d Remove: #55 アンテナ新規作成ボタンを除去 2023-10-03 20:29:15 +09:00
KMY
dd51fae42f Remove unsafed api emoji_reactions slim 2023-09-21 16:23:37 +09:00
KMY
e84eb3fc81 Remove moderation tool media list page 2023-09-21 16:20:07 +09:00
KMY
2667e478d3 Add emoji reaction api pagination support 2023-09-21 14:22:52 +09:00
KMY
9db1fb1153 Remove stop deliver to bot setting 2023-09-18 21:35:47 +09:00
KMY
cfa250421e Revert "Add block from bot follow settings"
This reverts commit ff994d78fa.
2023-09-18 21:33:05 +09:00
KMY
ff994d78fa Add block from bot follow settings 2023-09-18 18:10:53 +09:00
KMY
ed6acbf542 Merge branch 'kb_development' into kb_migration 2023-09-15 10:14:29 +09:00
KMY
e0da14515f Merge branch 'kb_patch' into kb_development 2023-09-15 09:42:57 +09:00
KMY
c0ff0754a3 Fix timeline emoji_reactions N+1 problem 2023-09-15 09:31:12 +09:00
KMY
22774276e8 Remove unsafe params from antenna old edit page 2023-09-14 18:47:58 +09:00
KMY
fbb1a69a65 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-13 22:08:20 +09:00
Robert R George
20666482ef
Added admin api for managing tags (#26872) 2023-09-13 11:22:53 +02:00
KMY
35c2bb9f44 Remove emoji reaction from fedibird_capabilities and setting pages when disabled 2023-09-13 13:17:54 +09:00
KMY
d450549d14 Fix hiding emoji reactions from anonymous 2023-09-13 10:22:44 +09:00
CSDUMMI
9a70cac9de
Fix #26849 by adding the domain of the current SSO provider to the form-action CSP (#26857) 2023-09-12 13:04:51 +02:00
KMY
ea6499b817 Move search setting to new page 2023-09-12 12:33:43 +09:00
KMY
6fe51e360a Make DTL switchable 2023-09-12 09:04:20 +09:00
KMY
d1ae53e688 Add ltl mode support 2023-09-11 12:03:10 +09:00
KMY
979292d950 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-10 16:17:34 +09:00
Claire
33c8708a1a
Change GET /api/v1/directory to use database replica rather than primary (#26856) 2023-09-08 17:01:02 +02:00
Claire
09ec9c6aa5
Downgrade signature verification debug logging from warn to debug (#26812) 2023-09-06 12:17:22 +02:00
KMY
fdf1d6df38 Merge remote-tracking branch 'parent/main' into kb_migration 2023-09-06 10:09:07 +09:00
Claire
548c032dbb
Improve interaction modal error handling (#26795) 2023-09-05 23:49:48 +02:00
KMY
751b603e12 Merge branch 'kb_development' into kb_migration 2023-09-04 21:16:30 +09:00