- Dec 15, 2024
-
-
かっこかり authored
* チャンネル一覧の列を最大3列にした (Otaku-Social#13) * fix * fix * fix *
🎨 * fix *🎨 * Update Changelog * Update Changelog * 要らない_marginを消す --------- Co-authored-by:tmorio <morikapusan@morikapu-denki.com>
-
FineArchs authored
-
- Dec 10, 2024
-
-
かっこかり authored
* fix(frontend): ノートがログインしているユーザーしか見れない場合にログインをキャンセルすると一切の処理が停止する問題を修正 * Update Changelog --------- Co-authored-by:
syuilo <4439005+syuilo@users.noreply.github.com>
-
かっこかり authored
* Resolve frontend/backend contradiction for home visibility embeds This now uses the same check from `packages/frontend/src/scripts/get-note-menu.ts` * Update Changelog --------- Co-authored-by:
CenTdemeern1 <timo.herngreen@gmail.com>
-
かっこかり authored
-
- Nov 30, 2024
-
-
-
syuilo authored
-
- Nov 25, 2024
-
-
github-actions[bot] authored
-
- Nov 24, 2024
-
-
anatawa12 authored
-
かっこかり authored
* check harder for connectibility `allSettled` does not throw if a promise is rejected, so `check_connect` never actually failed * Update Changelog --------- Co-authored-by:
dakkar <dakkar@thenautilus.net>
-
かっこかり authored
* fix(frontend): サーバードキュメントとMisskey関連リソースとの間にdividerが入らないことがある問題を修正 * Update Changelog
-
かっこかり authored
-
- Nov 23, 2024
- Nov 22, 2024
-
-
syuilo authored
-
かっこかり authored
-
github-actions[bot] authored
-
github-actions[bot] authored
-
syuilo authored
* New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Chinese Simplified)
-
かっこかり authored
* fix exception handling for Like activities (cherry picked from commit 8f42e843) * fix exception handling for Announce activities (cherry picked from commit cfc3ab4b) * fix exception handling for Undo activities * Update Changelog --------- Co-authored-by:
Hazelnoot <acomputerdog@gmail.com>
-
anatawa12 authored
-
- Nov 21, 2024
-
-
github-actions[bot] authored
-
かっこかり authored
-
syuilo authored
-
github-actions[bot] authored
-
かっこかり authored
* fix(backend): fix apResolver * fix * add comments * tweak comment
-
かっこかり authored
* Fix type error in security fixes (cherry picked from commit fa3cf6c2) * Fix error in test function calls (cherry picked from commit 1758f293) * Fix style error (cherry picked from commit 23c4aa25) * Fix another style error (cherry picked from commit 36af07ab) * Fix `.punyHost` misuse (cherry picked from commit 6027b516) * attempt to fix test: make yaml valid --------- Co-authored-by:
Julia Johannesen <julia@insertdomain.name>
-
かっこかり authored
-
syuilo authored
-
syuilo authored
Co-Authored-By:
Acid Chicken <root@acid-chicken.com>
-
- Nov 20, 2024
-
-
rectcoordsystem authored
* fix(backend): check target IP before sending HTTP request * fix(backend): allow accessing private IP when testing * Apply suggestions from code review Co-authored-by:
anatawa12 <anatawa12@icloud.com> * fix(backend): lint and typecheck * fix(backend): add isLocalAddressAllowed option to getAgentByUrl and send (HttpRequestService) * fix(backend): allow fetchSummaryFromProxy, trueMail to access local addresses --------- Co-authored-by:
anatawa12 <anatawa12@icloud.com> Co-authored-by:
syuilo <4439005+syuilo@users.noreply.github.com>
-
Julia authored
* Fix poll update spoofing * fix: Disallow negative poll counts --------- Co-authored-by:
syuilo <4439005+syuilo@users.noreply.github.com>
-
Julia authored
* enhance: Add a few validation fixes from Sharkey See the original MR on the GitLab instance: TransFem-org/Sharkey!484 Co-Authored-By:
Dakkar <dakkar@thenautilus.net> * fix: primitive 2: acceptance of cross-origin alternate Co-Authored-By:
Laura Hausmann <laura@hausmann.dev> * fix: primitive 3: validation of non-final url * fix: primitive 4: missing same-origin identifier validation of collection-wrapped activities * fix: primitives 5 & 8: reject activities with non string identifiers Co-Authored-By:
Laura Hausmann <laura@hausmann.dev> * fix: primitive 6: reject anonymous objects that were fetched by their id * fix: primitives 9, 10 & 11: http signature validation doesn't enforce required headers or specify auth header name Co-Authored-By:
Laura Hausmann <laura@hausmann.dev> * fix: primitive 14: improper validation of outbox, followers, following & shared inbox collections * fix: code style for primitive 14 * fix: primitive 15: improper same-origin validation for note uri and url Co-Authored-By:
Laura Hausmann <laura@hausmann.dev> * fix: primitive 16: improper same-origin validation for user uri and url * fix: primitive 17: note same-origin identifier validation can be bypassed by wrapping the id in an array * fix: code style for primitive 17 * fix: check attribution against actor in notes While this isn't strictly required to fix the exploits at hand, this mirrors the fix in `ApQuestionService` for GHSA-5h8r-gq97-xv69, as a preemptive countermeasure. * fix: primitive 18: `ap/get` bypasses access checks One might argue that we could make this one actually preform access checks against the returned activity object, but I feel like that's a lot more work than just restricting it to administrators, since, to me at least, it seems more like a debugging tool than anything else. * fix: primitive 19 & 20: respect blocks and hide more Ideally, the user property should also be hidden (as leaving it in leaks information slightly), but given the schema of the note endpoint, I don't think that would be possible without introducing some kind of "ghost" user, who is attributed for posts by users who have you blocked. * fix: primitives 21, 22, and 23: reuse resolver This also increases the default `recursionLimit` for `Resolver`, as it theoretically will go higher that it previously would and could possibly fail on non-malicious collection activities. * fix: primitives 25-33: proper local instance checks * revert: fix: primitive 19 & 20 This reverts commit 465a9fe6591de90f78bd3d084e3c01e65dc3cf3c. --------- Co-authored-by:
Dakkar <dakkar@thenautilus.net> Co-authored-by:
Laura Hausmann <laura@hausmann.dev> Co-authored-by:
syuilo <4439005+syuilo@users.noreply.github.com>
-
syuilo authored
* New translations ja-jp.yml (Catalan) * New translations ja-jp.yml (English) * New translations ja-jp.yml (Korean) * New translations ja-jp.yml (Chinese Simplified) * New translations ja-jp.yml (Chinese Traditional) * New translations ja-jp.yml (German)
-
Sayamame-beans authored
* fix(backend): renoteMute doesn't work for note notification * docs(changelog): update changelog
-
syuilo authored
* wip * Update CHANGELOG.md * wip
-
鴇峰 朔華 authored
* Mod: 絵文字のポップアップメニューに編集を追加 * fix: code styleの修正 * fix: code styleの修正 * fix
-
- Nov 19, 2024
-
-
zawa-ch. authored
* アカウント削除のモデレーションログが動作していないのを修正 * update CHANGELOG
-