summaryrefslogtreecommitdiff
path: root/packages/backend/src/server/web (follow)
Commit message (Collapse)AuthorAgeFilesLines
* split url into webUrl and localUrl (like mastodon)stableFreya Murphy13 hours14-25/+28
|
* set X-Robots-Tag to disable indexing API endpointsHazelnoot2025-06-131-0/+4
|
* use pnpm package alias for @transfem-org/sfm-jsHazelnoot2025-06-121-1/+1
|
* check that detected AP object is actually a note before recording it in ↵Hazelnoot2025-06-071-2/+3
| | | | UrlPreviewService
* cache alternate URLs in UrlPreviewServiceHazelnoot2025-06-041-1/+17
|
* redirect to exclude hash from preview URLHazelnoot2025-06-041-1/+13
|
* check input URL scheme before continuingHazelnoot2025-06-041-0/+7
|
* check if previews are disabled before anything elseHazelnoot2025-06-041-10/+10
|
* some requested changes to linkAttribution.piuvas2025-05-271-21/+11
|
* requested changes.piuvas2025-05-271-10/+8
|
* add missing semicolons.piuvas2025-05-271-3/+3
|
* small fixes.piuvas2025-05-261-5/+1
|
* initial link attributions work.piuvas2025-05-261-1/+49
|
* use config.url instead of "https://${config.host}"Hazelnoot2025-05-212-1/+2
|
* factor our cache logic into a separate methodHazelnoot2025-05-191-27/+37
|
* remove preview ActivityPub flag if we encounter a permanent (non-retryable) ↵Hazelnoot2025-05-191-13/+37
| | | | error while fetching the note
* add rate limit for URL previewHazelnoot2025-05-191-11/+61
|
* make sure that the "fetch linked note" button actually remembers that the ↵Hazelnoot2025-05-191-32/+146
| | | | note is fetched
* fix return type of fetchSummary and fetchSummaryFromProxyHazelnoot2025-05-081-2/+2
|
* add same-authority check between fetched note and summary urlHazelnoot2025-05-081-1/+1
|
* avoid fetching notes twice in UrlPreviewServiceHazelnoot2025-05-081-9/+14
|
* check summary.haveNoteLocally after setting summary.activityPub to improve ↵Hazelnoot2025-05-081-14/+11
| | | | support for Akkoma
* softer URL preview validation: remove unsupported URLs instead of rejecting ↵Hazelnoot2025-05-081-4/+8
| | | | the whole preview
* validate more URLs in UrlPreviewService.tsHazelnoot2025-05-081-8/+37
|
* await cache update to avoid hammering redis in UrlPreviewService.tsHazelnoot2025-05-081-1/+2
|
* reduce caching for failed previewsHazelnoot2025-05-081-1/+1
|
* reduce log spam from UrlPreviewService.tsHazelnoot2025-05-081-7/+2
|
* match preview cache duration for HTTP and RedisHazelnoot2025-05-081-4/+4
|
* add version specifier to URL preview cacheHazelnoot2025-05-081-6/+9
|
* don't proxy local URLsHazelnoot2025-05-081-6/+10
|
* allow summaly previews to redirectHazelnoot2025-05-081-3/+15
|
* infer ActivityPub links from signed GETHazelnoot2025-05-081-2/+17
|
* infer ActivityPub links from local DBHazelnoot2025-05-081-0/+39
|
* fix eslint warning in UrlPreviewService.tsHazelnoot2025-05-081-1/+1
|
* extract LocalSummalyResult typeHazelnoot2025-05-081-12/+16
|
* set summary.haveNoteLocally before caching summaryHazelnoot2025-05-081-3/+3
|
* Merge branch 'misskey-develop' into merge/2025-03-24Hazelnoot2025-04-292-0/+2
|\ | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | # Conflicts: # .github/workflows/api-misskey-js.yml # .github/workflows/changelog-check.yml # .github/workflows/check-misskey-js-autogen.yml # .github/workflows/get-api-diff.yml # .github/workflows/lint.yml # .github/workflows/locale.yml # .github/workflows/on-release-created.yml # .github/workflows/storybook.yml # .github/workflows/test-backend.yml # .github/workflows/test-federation.yml # .github/workflows/test-frontend.yml # .github/workflows/test-misskey-js.yml # .github/workflows/test-production.yml # .github/workflows/validate-api-json.yml # package.json # packages/backend/package.json # packages/backend/src/server/api/ApiCallService.ts # packages/backend/src/server/api/endpoints/drive/files/create.ts # packages/frontend-shared/js/url.ts # packages/frontend/package.json # packages/frontend/src/components/MkFileCaptionEditWindow.vue # packages/frontend/src/components/MkInfo.vue # packages/frontend/src/components/MkLink.vue # packages/frontend/src/components/MkNote.vue # packages/frontend/src/components/MkNotes.vue # packages/frontend/src/components/MkPageWindow.vue # packages/frontend/src/components/MkReactionsViewer.vue # packages/frontend/src/components/MkTimeline.vue # packages/frontend/src/components/MkUrlPreview.vue # packages/frontend/src/components/MkUserPopup.vue # packages/frontend/src/components/global/MkPageHeader.vue # packages/frontend/src/components/global/MkUrl.vue # packages/frontend/src/components/global/PageWithHeader.vue # packages/frontend/src/pages/about-misskey.vue # packages/frontend/src/pages/announcements.vue # packages/frontend/src/pages/antenna-timeline.vue # packages/frontend/src/pages/channel.vue # packages/frontend/src/pages/instance-info.vue # packages/frontend/src/pages/note.vue # packages/frontend/src/pages/page.vue # packages/frontend/src/pages/role.vue # packages/frontend/src/pages/tag.vue # packages/frontend/src/pages/timeline.vue # packages/frontend/src/pages/user-list-timeline.vue # packages/frontend/src/pages/user/followers.vue # packages/frontend/src/pages/user/following.vue # packages/frontend/src/pages/user/home.vue # packages/frontend/src/pages/user/index.vue # packages/frontend/src/ui/deck.vue # packages/misskey-js/generator/package.json # pnpm-lock.yaml # scripts/changelog-checker/package-lock.json # scripts/changelog-checker/package.json
| * feat(frontend): タイトルバーを表示できるようにsyuilo2025-04-292-0/+2
| |
| * Merge commit from forkJulia2025-04-291-6/+4
| | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | | * SP-2025-03.1 always wrap icon&thumbnail URLs if they're not HTTP URLs, the frontend won't be able to display them anyway (`<img src="mailto:…">` or '<div stile="background-image: url(nntp:…)">` aren't going to work!), so let's always run them through the media proxy, which will fail harder (fetching a `javascript:` URL won't do anything in the backend, might do something in the frontend) and will always protect the client's address in cases like `gemini:` where the browser could try to fetch * SP-2025-03.2 use object binding for more styles interpolating a random (remote-controlled!) string into a `style` attribute is a bad idea; using VueJS object binding, we should get proper quoting and therefore safe parse failures instead of CSS injections / XSS * SP-2025-03.3 slightly more robust "self" URL handling parse URLs instead of treating them as strings; this is still not perfect, but the `URL` class only handles full URLs, not relative ones, so there's so way to ask it "give me a URL object that represents this resource relative to this base URL" notice that passing very weird URLs to `MkUrl` and `MkUrlPreview` will break the frontend (in dev mode) because there's an untrapped `new URL(…)` that may explode; production builds seem to safely ignore the error, though --------- Co-authored-by: dakkar <dakkar@thenautilus.net>
* | Merge branch 'develop' into merge/2025-03-24dakkar2025-04-281-6/+4
|\ \
| * \ Merge branch 'stable' into merge-stable-into-developJulia Johannesen2025-04-271-8/+6
| |\ \
| | * | Update summalyJulia Johannesen2025-04-271-2/+2
| | | |
| | * | Security fixesJulia Johannesen2025-04-271-6/+4
| | | | | | | | | | | | | | | | Co-Authored-By: dakkar <dakkar@thenautilus.net>
* | | | merge upstream againHazelnoot2025-04-242-2/+2
|\ \ \ \ | | |_|/ | |/| |
| * | | fix: avatarId が null のときにも avatarUrl が non null ↵anatawa122025-04-152-2/+2
| | | | | | | | | | | | | | | | 担ってることがある問題 (#15833)
* | | | Merge branch 'develop' into merge/2025-03-24Hazelnoot2025-04-241-1/+1
|\ \ \ \ | | |/ / | |/| | | | | | | | | | | | | | # Conflicts: # CONTRIBUTING.md # packages/backend/src/core/activitypub/models/ApPersonService.ts
| * | | merge: make MOTD html unescaped. (requires discussion?) (!759)Marie2025-04-151-1/+1
| |\ \ \ | | | | | | | | | | | | | | | | | | | | | | | | | View MR for information: https://activitypub.software/TransFem-org/Sharkey/-/merge_requests/759 Approved-by: Hazelnoot <acomputerdog@gmail.com> Approved-by: Marie <github@yuugi.dev>
| | * | | unescape MOTD htmlpiuvas2024-11-201-1/+1
| | | | |
* | | | | Merge branch 'develop' into merge/2025-03-24Hazelnoot2025-04-132-0/+3
|\| | | |
| * | | | feat: Allow injection of raw HTML strings inside <head>Zlendy2025-04-112-0/+3
| | | | |
generated by cgit v1.2.3-freya (git 2.53.0.84.g453e7b744a) at 2026-03-03 13:03:42 +0000