Eugen Rochko 0c28a505dd Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)

2020-02-27 12:32:54 +01:00

..

activitypub

…

admin

Add publish/unpublish controls to announcements in admin UI (#12967)

2020-01-27 11:05:33 +01:00

api

Fix leak of arbitrary statuses through unfavourite action in REST API (#13161)

2020-02-27 12:32:54 +01:00

auth

Fix sign-ups without checked user agreement being accepted through the web form (#13088)

2020-02-16 12:56:53 +01:00

concerns

Change signature verification to ignore signatures with invalid host (#13033)

2020-02-03 17:48:23 +01:00

oauth

Fix settings pages being cacheable by the browser (#12714)

2019-12-30 04:38:30 +01:00

settings

Fix base64-encoded file uploads not being possible (#12748)

2020-01-04 01:54:07 +01:00

well_known

Fix uncaught unknown format errors in host meta controller (#12747)

2020-01-03 05:28:56 +01:00

about_controller.rb

…

account_follow_controller.rb

…

account_unfollow_controller.rb

…

accounts_controller.rb

Fix account JSON/RSS not being cacheable due to wrong mime type comparison (#13116)

2020-02-19 22:31:53 +01:00

application_controller.rb

Fix base64-encoded file uploads not being possible (#12748)

2020-01-04 01:54:07 +01:00

authorize_interactions_controller.rb

…

custom_css_controller.rb

…

directories_controller.rb

…

emojis_controller.rb

…

filters_controller.rb

Fix missing authentication call in filters controller (#12746)

2020-01-03 05:29:08 +01:00

follower_accounts_controller.rb

Hide blocked users from more places (#12733)

2019-12-31 00:55:32 +01:00

following_accounts_controller.rb

Hide blocked users from more places (#12733)

2019-12-31 00:55:32 +01:00

home_controller.rb

…

instance_actors_controller.rb

…

intents_controller.rb

…

invites_controller.rb

…

manifests_controller.rb

…

media_controller.rb

…

media_proxy_controller.rb

…

public_timelines_controller.rb

…

relationships_controller.rb

Change followers page to relationships page in admin UI (#12927)

2020-01-23 20:33:20 +01:00

remote_follow_controller.rb

…

remote_interaction_controller.rb

…

shares_controller.rb

…

statuses_controller.rb

Fix OEmbed leaking information about existence of non-public statuses (#12930)

2020-01-24 00:20:51 +01:00

tags_controller.rb

Fix unfiltered params error when generating ActivityPub tag pagination (#13049)

2020-02-08 17:29:40 +01:00