55144262d0
Fix unescaped user input in LDAP query ( #24379 )
...
Fix CVE-2023-28853
2023-04-04 12:38:58 +02:00
0f4c908b64
Fix invalid/expired invites being processed on sign-up ( #24337 )
2023-04-04 12:38:58 +02:00
d25493e262
Fix user archive takeout when using OpenStack Swift or S3 providers with no ACL support ( #24200 )
2023-04-04 12:38:58 +02:00
f90daf58db
Add warning for object storage misconfiguration ( #24137 )
2023-03-16 22:50:15 +01:00
a42b48ea4e
Change user backups to use expiring URLs for download when possible ( #24136 )
2023-03-16 22:50:15 +01:00
f036546c22
Fix misleading error code when receiving invalid WebAuthn credentials ( #23568 )
2023-03-16 12:34:43 +01:00
9256d653a5
Fix incorrect post links in strikes when the account is remote ( #23611 )
2023-03-16 12:34:37 +01:00
d0c0808ad4
Add null check on application in dispute viewer ( #19851 )
2023-03-16 12:33:09 +01:00
cb622b23b1
Fix dashboard crash on ElasticSearch server error ( #23751 )
2023-03-16 12:31:20 +01:00
a1e765991e
Add mail headers to avoid auto-replies ( #23597 )
2023-03-14 11:46:12 +01:00
76b9f42712
Add `lang` tag to native language names in language picker ( #23749 )
2023-03-14 11:46:12 +01:00
a717aa929c
Center the text itself in upload area ( #24029 )
2023-03-14 11:46:12 +01:00
e6f6fe6106
Fix original account being unfollowed on migration before the follow request could be sent ( #21957 )
2023-03-14 11:46:12 +01:00
86b1adf7d7
Fix unconfirmed accounts being registered as active users ( #23803 )
2023-03-14 10:26:38 +01:00
4beeec4e50
Fix server error when failing to follow back followers from `/relationships` ( #23787 )
2023-03-14 10:26:23 +01:00
3c44ba0411
Fix inefficiency when searching accounts per username in admin interface ( #23801 )
2023-03-14 10:26:14 +01:00
339d4fa61c
Fix case-sensitive check for previously used hashtags ( #23526 )
2023-03-14 10:25:48 +01:00
62f0eab635
Fix “Remove all followers from the selected domains” being more destructive than it claims ( #23805 )
2023-03-14 10:25:38 +01:00
a8a3e86216
Fix unbounded recursion in post discovery ( #23507 )
...
* Add a limit to how many posts can get fetched as a result of a single request
* Add tests
* Always pass `request_id` when processing `Announce` activities
---------
Co-authored-by: nametoolong <nametoolong@users.noreply.github.com>
2023-02-10 22:16:47 +01:00
be1caad933
Fix REST API serializer for Account not including `moved` when the moved account has itself moved ( #22483 ) ( #23492 )
...
Instead of cutting immediately, cut after one recursion.
2023-02-09 21:02:09 +01:00
533bf92d21
Don't delivery a reply to domains which are blocked by author ( #22117 ) ( #23490 )
...
Co-authored-by: Jeong Arm <kjwonmail@gmail.com>
2023-02-09 21:01:53 +01:00
6a2b48190c
Log admin approve and reject account ( #22088 ) ( #23488 )
...
* Log admin approve and reject account
* Add unit tests for approve and reject logging
Co-authored-by: Francis Murillo <evacuee.overlap.vs3op@aleeas.com>
2023-02-09 21:01:45 +01:00
6cbc589990
Fix `UserCleanupScheduler` crash when an unconfirmed account has a moderation note ( #23318 ) ( #23487 )
...
* Fix `UserCleanupScheduler` crash when an unconfirmed account has a moderation note
* Add tests
2023-02-09 21:01:38 +01:00
a2bfb16cb8
Fix crash when marking statuses as sensitive while some statuses are deleted ( #22134 ) ( #23486 )
...
* Do not offer to mark statuses as sensitive if there is no undeleted status with media attachments
* Fix crash when marking statuses as sensitive while some statuses are deleted
Fixes #21910
* Fix multiple strikes being created for a single report when selecting “Mark as sensitive”
* Add tests
2023-02-09 21:01:21 +01:00
cfc0507010
Fix attachments of edited statuses not being fetched ( #21565 ) ( #23485 )
...
* Fix attachments of edited statuses not being fetched
* Fix tests
2023-02-09 20:57:31 +01:00
eade64097c
Clear voter count when poll is reset ( #21700 ) ( #23484 )
...
When a poll is edited, we reset the poll and remove all previous
votes. However, prior to this commit, the voter count on the poll
was not reset. This leads to incorrect percentages being shown in
poll results.
Fixes #21696
Co-authored-by: afontenot <adam.m.fontenot@gmail.com>
2023-02-09 20:57:24 +01:00
1f0be21317
Fix some performance issues with /admin/instances ( #21907 ) ( #23483 )
...
/admin/instances?availability=failing remains wholly unefficient
2023-02-09 20:57:14 +01:00
0ca877f084
Fix possible race conditions when suspending/unsuspending accounts ( #22363 ) ( #23482 )
...
* Fix possible race conditions when suspending/unsuspending accounts
* Fix tests
Tests were assuming SuspensionWorker and UnsuspensionWorker would do the
suspending/unsuspending themselves, but this has changed.
2023-02-09 20:57:06 +01:00
cc233af129
Fix suspension worker crashing on S3-compatible setups without ACL support ( #22487 ) ( #23481 )
2023-02-09 20:56:58 +01:00
83f1c6460a
Fix changing domain block severity not undoing individual account effects ( #22135 ) ( #23480 )
...
* Fix changing domain block severity not undoing individual account effects
Fixes #22133
* Add tests
2023-02-09 20:56:49 +01:00
e26dd2ea8f
Add `form-action` CSP directive ( #23478 )
...
* Add form-action CSP directive (#20781 )
* Fix OAuth flow being broken by recent CSP change (#20958 )
* Fix form-action CSP directive for external login (#20962 )
2023-02-09 20:56:37 +01:00
ee66f5790f
Fix unbounded recursion in account discovery (v3.5 backport) ( #22026 )
...
* Fix trying to fetch posts from other users when fetching featured posts
* Rate-limit discovery of new subdomains
* Put a limit on recursively discovering new accounts
2022-12-15 19:21:17 +01:00
b22e1476ca
Fix nodes order being sometimes mangled when rewriting emoji ( #20677 )
...
* Fix front-end emoji tests
* Fix nodes order being sometimes mangled when rewriting emoji
2022-11-14 22:20:29 +01:00
2dd8f977e8
Fix emoji substitution not applying only to text nodes in backend code
...
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2022-11-14 11:20:41 +01:00
2db06e1d08
Fix emoji substitution not applying only to text nodes in Web UI
...
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2022-11-14 11:20:41 +01:00
47eaf85f02
Fix crash when a remote Flag activity mentions a private post ( #18760 )
...
* Add tests
* Fix crash when a remote Flag activity mentions a private post
2022-11-14 11:20:41 +01:00
0a1992430d
Fix errors when rendering RSS feeds ( #18531 )
2022-05-26 23:02:42 +02:00
52f4e834f2
Fix concurrent unfollowing decrementing follower count more than once ( #18527 )
2022-05-26 22:14:47 +02:00
8a9acbe604
Fix being able to appeal a strike unlimited times ( #18529 )
...
Peculiarity of the `has_one` association is that the convenience
creation method deletes the previous association even if the new
one is invalid
2022-05-26 22:08:12 +02:00
c4d2c39a75
Fix being able to report otherwise inaccessible statuses ( #18528 )
2022-05-26 22:08:02 +02:00
1ff4877945
Fix empty votes arbitrarily increasing voters count in polls ( #18526 )
2022-05-26 22:06:10 +02:00
976cd6413e
Fix moderator leak in undo_mark_statuses_as_sensitive ( #18525 )
...
Signed-off-by: Eugen Rochko <eugen@zeonfederated.com>
Co-authored-by: 40826d <74816220+40826d@users.noreply.github.com>
2022-05-26 22:04:16 +02:00
9f81b9f29a
Fix suspended users being able to access APIs that don't require a user ( #18524 )
2022-05-26 22:04:05 +02:00
96129c2f10
Fix confirmation redirect to app without `Location` header ( #18523 )
2022-05-26 22:03:54 +02:00
3e0e7a1cfb
Fix follower and other counters being able to go negative ( #18517 )
2022-05-26 20:32:48 +02:00
088dc0ec5a
Fix regression in `tootctl search deploy` caused by unloaded attribute ( #18514 )
2022-05-26 18:05:47 +02:00
a4fa9e23fc
Change "dangerous" to "sensitive" in privacy policy and web UI ( #18515 )
...
Fix #18470
2022-05-26 17:55:05 +02:00
440eb71310
Change unapproved and unconfirmed account to not be accessible in the REST API ( #17530 )
...
* Change unapproved and unconfirmed account to not be accessible in the REST API
* Change Account#searchable? to reject unconfirmed and unapproved users
* Disable search for unapproved and unconfirmed users in Account.search_for
* Disable search for unapproved and unconfirmed users in Account.advanced_search_for
* Remove unconfirmed and unapproved accounts from Account.searchable scope
* Prevent mentions to unapproved/unconfirmed accounts
* Fix some old tests for Account.advanced_search_for
* Add some Account.advanced_search_for tests for existing behaviors
* Add some tests for Account.search_for
* Add Account.advanced_search_for tests unconfirmed and unapproved accounts
* Add Account.searchable tests
* Fix Account.without_unapproved scope potentially messing with previously-applied scopes
* Allow lookup of unconfirmed/unapproved accounts through /api/v1/accounts/lookup
This is so that the API can still be used to check whether an username is free
to use.
2022-05-26 15:50:33 +02:00
25dda3061e
Fix unnecessary query on status creation ( #17901 )
2022-05-26 00:20:30 +02:00
96f29ce91a
New Crowdin updates ( #18458 )
...
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations doorkeeper.en.yml (Ido)
* New translations devise.en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations doorkeeper.en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations doorkeeper.en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations doorkeeper.en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.json (Esperanto)
* New translations en.yml (Esperanto)
* New translations en.json (Esperanto)
* New translations doorkeeper.en.yml (Esperanto)
* New translations en.json (Esperanto)
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations en.json (Ido)
* New translations doorkeeper.en.yml (Ido)
* New translations en.yml (Ido)
* New translations en.json (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.json (Armenian)
* New translations en.json (Armenian)
* New translations en.json (Armenian)
* New translations en.json (Scottish Gaelic)
* New translations en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.yml (Ido)
* New translations simple_form.en.yml (Ido)
* New translations en.yml (Russian)
* New translations en.json (Estonian)
* New translations en.json (Estonian)
* New translations en.json (Estonian)
* New translations en.json (Estonian)
* New translations en.yml (Estonian)
* New translations en.json (Estonian)
* New translations en.json (Estonian)
* New translations en.yml (Estonian)
* New translations en.json (Estonian)
* New translations en.yml (Estonian)
* New translations en.json (Estonian)
* New translations en.json (Estonian)
* New translations en.yml (Russian)
* New translations en.yml (Russian)
* New translations simple_form.en.yml (Russian)
* New translations en.yml (Russian)
* New translations simple_form.en.yml (Russian)
* New translations en.json (Sorani (Kurdish))
* New translations en.json (Sorani (Kurdish))
* New translations en.json (Sorani (Kurdish))
* New translations activerecord.en.yml (Sorani (Kurdish))
* New translations doorkeeper.en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* New translations doorkeeper.en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* New translations en.yml (Sorani (Kurdish))
* Run `yarn manage:translations`
* Run `bundle exec i18n-tasks normalize`
Co-authored-by: Yamagishi Kazutoshi <ykzts@desire.sh>
2022-05-24 23:33:18 +09:00
Claire
Eugen Rochko
Jeremy Kescher
Rodion Borisov
Dean Bassett