| Commit message (Collapse) | Author | Age | Files | Lines |
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
| |
none of our endpoints will ever contain `..` (they might, maybe, at
some point, contain `.`, as in `something/get.html`?), so every
`Mk:api()` call to an endpoint that contains `..` can't work: let's
reject it outright
Co-authored-by: dakkar <dakkar@thenautilus.net>
|
| | |
|
| |
|
|
|
| |
* fix(frontend): attempt to fix lint
* fix lint
|
| | |
|
| | |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* SP-2025-03.1 always wrap icon&thumbnail URLs
if they're not HTTP URLs, the frontend won't be able to display them
anyway (`<img src="mailto:…">` or '<div stile="background-image:
url(nntp:…)">` aren't going to work!), so let's always run them through the
media proxy, which will fail harder (fetching a `javascript:` URL
won't do anything in the backend, might do something in the frontend)
and will always protect the client's address in cases like `gemini:`
where the browser could try to fetch
* SP-2025-03.2 use object binding for more styles
interpolating a random (remote-controlled!) string into a `style`
attribute is a bad idea; using VueJS object binding, we should get
proper quoting and therefore safe parse failures instead of CSS
injections / XSS
* SP-2025-03.3 slightly more robust "self" URL handling
parse URLs instead of treating them as strings; this is still not
perfect, but the `URL` class only handles full URLs, not relative
ones, so there's so way to ask it "give me a URL object that
represents this resource relative to this base URL"
notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will
break the frontend (in dev mode) because there's an untrapped `new
URL(…)` that may explode; production builds seem to safely ignore the
error, though
---------
Co-authored-by: dakkar <dakkar@thenautilus.net>
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* New translations ja-jp.yml (Thai)
* New translations ja-jp.yml (Spanish)
* New translations ja-jp.yml (Chinese Traditional)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (Catalan)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (German)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Chinese Simplified)
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
添付ファイルのあるリクエストを受けたときの初動を改善 (#15896)
* wip
* ロールポリシーの値も参照するように
* エンドポイントのテストを追加
* fix review
* add spdx
* fix CHANGELOG.md
* fix test
* regenerate
* add log
* Revert "add log"
This reverts commit 4b2bf59a609b85ca0bfcc9b71438db782f11983d.
* add log
* fix
* Revert "add log"
This reverts commit c5a73d57da0f30ec5215e08a8b4d78785cce48d1.
|
| |
|
|
| |
Fix #15723
|
| | |
|
| |
|
|
|
|
|
| |
test (#15903)
* chore(ci): change the Test step to terminate with error in the federation test
* chore(ci): always stop servers in the federation test
|
| | |
|
| |
|
| |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| | |
|
| | |
|
| |
|
| |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| | |
|
| |
|
| |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| | |
|
| |
|
| |
Co-authored-by: syuilo <4439005+syuilo@users.noreply.github.com>
|
| | |
|
| |\ |
|
| | |
| |
| | |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| | |
| |
| | |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| | |
| |
| | |
Co-authored-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
|
| |/ |
|
| | |
|
| | |
|
| | |
|
| |
|
|
|
|
|
|
|
| |
* Exclude blocked instance note from most timelines
* Exclude blocked instance note from FTT timelines
* Exclude blocked instance note from featured
* fix type
|
| |\ |
|
| | | |
|
| |/ |
|
| | |
|
| | |
|
| |\ |
|
| | | |
|
| |/ |
|
| |
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| |
* New translations ja-jp.yml (Spanish)
* New translations ja-jp.yml (Spanish)
* New translations ja-jp.yml (Korean)
* New translations ja-jp.yml (German)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (Catalan)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Chinese Simplified)
* New translations ja-jp.yml (German)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (Catalan)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Romanian)
* New translations ja-jp.yml (Portuguese)
* New translations ja-jp.yml (Portuguese)
* New translations ja-jp.yml (Chinese Traditional)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (Spanish)
* New translations ja-jp.yml (Italian)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Thai)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Korean)
* New translations ja-jp.yml (Spanish)
* New translations ja-jp.yml (Chinese Traditional)
* New translations ja-jp.yml (Chinese Traditional)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Vietnamese)
* New translations ja-jp.yml (Chinese Traditional)
* New translations ja-jp.yml (English)
* New translations ja-jp.yml (German)
* New translations ja-jp.yml (Catalan)
* New translations ja-jp.yml (Chinese Simplified)
* New translations ja-jp.yml (Dutch)
* New translations ja-jp.yml (Vietnamese)
|
| |\ |
|
| | | |
|
| |/ |
|
| | |
|