nas/app/controllers/api
Claire 21b716db12 Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-05 07:10:33 +09:00
..
v1 Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-05 07:10:33 +09:00
v2 Merge remote-tracking branch 'parent/main' into upstream-20240124 2024-01-24 08:38:14 +09:00
web Improve spec coverage for api/web/push_subscriptions controller (#27858) 2023-11-15 13:14:51 +00:00
base_controller.rb Merge remote-tracking branch 'parent/main' into upstream-20240422 2024-04-22 08:58:37 +09:00
oembed_controller.rb Fix OEmbed leaking information about existence of non-public statuses (#12930) 2020-01-24 00:20:51 +01:00