paravielfalt/mastodon
5
0
Fork 0
Code Issues Pull requests Projects Releases Packages 1 Activity Actions
mastodon/app/controllers
History
Claire 4fb4721072
Merge pull request from GHSA-58x8-3qxw-6hm7 
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-04 16:26:49 +02:00
..
activitypub Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
admin Fix missing destory audit logs for Domain Allows (#30125) 2024-05-17 12:30:00 +02:00
api Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00
auth Fix user creation failure handling in OAuth paths (#29207) 2024-02-14 22:55:31 +01:00
concerns Remove caching in cache_collection (#29862) 2024-05-17 12:30:00 +02:00
disputes Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
filters Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
oauth Merge pull request from GHSA-vp5r-5pgw-jwqx 2024-07-04 16:11:28 +02:00
settings Add new public status index (#26344) 2023-08-24 16:40:04 +02:00
well_known Add fallback redirection when getting a webfinger query WEB_DOMAIN@WEB_DOMAIN (#28592) 2024-05-17 12:30:00 +02:00
about_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2023-04-28 10:27:26 +02:00
accounts_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00
application_controller.rb Add authorized_fetch server setting in addition to env var (#25798) 2023-09-01 15:41:10 +02:00
authorize_interactions_controller.rb Change interaction modal in web UI (#26075) 2023-07-27 16:11:17 +02:00
backups_controller.rb Storage: add :azure to remaining callers (#26080) 2023-07-27 16:13:45 +02:00
custom_css_controller.rb Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
emojis_controller.rb Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
filters_controller.rb Fix Rails/ActionOrder cop (#24692) 2023-04-30 06:46:39 +02:00
follower_accounts_controller.rb Fix Vary headers not being set on some redirects (#27272) 2023-10-10 13:52:41 +02:00
following_accounts_controller.rb Fix Vary headers not being set on some redirects (#27272) 2023-10-10 13:52:41 +02:00
health_controller.rb Change health check (#15988) 2021-04-03 02:39:04 +02:00
home_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2023-04-28 10:27:26 +02:00
instance_actors_controller.rb Fix /actor needlessly reading session cookie and varying on Signature (#24664) 2023-04-26 11:42:26 +02:00
intents_controller.rb Fix Performance/DeletePrefix cop (#24796) 2023-05-02 21:07:45 +02:00
invites_controller.rb Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
mail_subscriptions_controller.rb Add List-Unsubscribe email header (#26085) 2023-08-01 19:34:40 +02:00
manifests_controller.rb Fix some user-independent endpoints potentially reading session cookies (#24650) 2023-04-25 22:14:44 +02:00
media_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00
media_proxy_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00
privacy_controller.rb Change logged-out WebUI HTML pages to be cached for a few seconds (#24708) 2023-04-28 10:27:26 +02:00
relationships_controller.rb Fix call to inefficient delete_matched cache method in domain blocks (#28367) 2023-12-19 11:27:37 +01:00
remote_interaction_helper_controller.rb Change interaction modal in web UI (#26075) 2023-07-27 16:11:17 +02:00
shares_controller.rb Fix blurhash and autoplay not working on public pages (#11585) 2019-08-16 19:15:05 +02:00
statuses_cleanup_controller.rb Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
statuses_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00
tags_controller.rb Refactor: replace whitelist_mode mentions with limited_federation_mode (#26252) 2023-08-02 19:32:48 +02:00