Barış Soner Uşaklı
da2597f81c
fix: sanitize svg when uploading site-logo, default avatar and og:image
2025-06-11 17:13:56 -04:00
Barış Soner Uşaklı
b02eb57d06
fix: escape, query params
2025-06-09 10:23:00 -04:00
Barış Uşaklı
4fbcfae8b1
Post queue write api ( #13473 )
...
* move post queue from socket.io to rest api
* move harmony post-queue to core
add canEdit, allow users to edit their queued posts
* fix: openapi spec
* lint: whitespace
2025-06-05 07:15:45 -04:00
Julian Lam
524a1e8bfe
fix: return 200 for non-implemented activities instead of 501
2025-06-02 10:15:05 -04:00
Julian Lam
e70e990a1a
feat: restrict access to ap.probe method to registered users, add rate limiting protection
2025-05-22 14:13:41 -04:00
Barış Soner Uşaklı
f88f99b7a2
Merge branch 'master' into develop
2025-05-12 10:29:45 -04:00
Barış Soner Uşaklı
285d438cb3
fix: escape flag filters
2025-05-12 09:30:33 -04:00
Julian Lam
d7cc637675
Merge branch 'master' into develop
2025-05-09 10:17:50 -04:00
Julian Lam
64fdf91b6b
fix: wrap generateCollection calls in try..catch to send 404 if thrown
2025-05-09 10:16:33 -04:00
Julian Lam
6bfe4e627d
fix: another case
2025-05-08 16:34:13 -04:00
Julian Lam
e042201f4b
fix: handle missing orderedItems property in followers route
2025-05-08 16:32:21 -04:00
Julian Lam
53bb0bbc26
fix: handle missing orderedItems
2025-05-06 12:30:43 -04:00
Julian Lam
f83b1fbf68
fix: extra orderedItems property in generated paginated OrderedCollection, #13153
2025-05-06 12:27:35 -04:00
Julian Lam
a2de7aaecf
fix : #13153 , follower and following collections to use generateCollection helper
2025-05-06 12:27:35 -04:00
Julian Lam
28b7a20339
lint: yup.
2025-04-29 15:13:22 -04:00
Julian Lam
695312f17f
fix: missing teasers for remote categories on /world
2025-04-29 10:28:18 -04:00
Julian Lam
34ab677174
feat: show tracked/watched remote categories in world page, #13255
2025-04-29 10:28:18 -04:00
Julian Lam
0b333fb7d4
fix: allow category controller to respond also by remote category id
2025-04-29 10:28:17 -04:00
Julian Lam
bfc7daf255
refactor: categories.sortTidsBySet to not take cid, retrieve from tids themselves
...
re: ##13255, this fixes the issue with topics outside of cid -1 in /world being sorted incorrectly
2025-04-29 10:28:17 -04:00
Julian Lam
1f40995f79
refactor: ability to browse to remote categories, group actor assertion logic, etc. -- no logic to assign topics to remote categories yet
2025-04-29 10:28:17 -04:00
Barış Soner Uşaklı
a5afad27e5
feat: chat allow/deny list, closes #13359
2025-04-25 11:54:11 -04:00
Barış Soner Uşaklı
8ffbc35923
refactor: add sping/ping into openapi
...
change getObject to getSortedSetRange so db is always checked. getObject calls are cached
2025-04-24 09:50:52 -04:00
Barış Soner Uşaklı
73c8dbfe00
Merge branch 'master' into develop
2025-04-12 14:16:58 -04:00
Barış Soner Uşaklı
33d50637a3
fix: closes #13317 , fix email confirm for changing email
2025-04-10 09:53:20 -04:00
Barış Soner Uşaklı
3526c937cc
fix: tag urls getting double escaped ( #13306 )
...
* fix: tag urls getting double escaped
get rid of weird decodeURIComponent($.param()) usage
$.param returns a string suitable for use in query param string
* add a new test
2025-04-07 13:23:22 -04:00
Barış Soner Uşaklı
3ad6ee075b
Thumb uploads/post uploads normalization ( #13300 )
...
* testing thumn/post upload refactor
* fix: isOrphan check
* lint: fix md5
* test: fix upload test
* user
* fix: upgrade script
* refactor: long line
* lint: lint
* test: fix tests
* Squashed commit of the following:
commit cd70e6c610
Author: Barış Soner Uşaklı <barisusakli@gmail.com >
Date: Fri Apr 4 09:24:54 2025 -0400
fix: req.body can be undefined
* refactor: show data on test fail
* test: logs
* test: change test
* make sure timestamps are different
2025-04-04 10:45:05 -04:00
Barış Soner Uşaklı
cd70e6c610
fix: req.body can be undefined
2025-04-04 09:24:54 -04:00
Barış Soner Uşaklı
d9f33204a8
fix: use slug instead of groupname in acp for groups
...
#13286 , acp page was inaccessible
2025-04-01 10:46:31 -04:00
Barış Soner Uşaklı
389bc062e3
feat: body-parser-2.x test ( #13278 )
...
* feat: body-parser-2.x test
* fix req.body
2025-03-27 11:29:37 -04:00
Barış Soner Uşaklı
d147432d2a
Merge branch 'master' into develop
2025-03-22 12:03:52 -04:00
Barış Soner Uşaklı
6813664120
feat: testing eslint9 ( #13266 )
...
* feat: testing eslint9
* fix: restore original functionality
2025-03-22 11:21:49 -04:00
Barış Soner Uşaklı
6fe066ced2
fix: check if latestversion is valid before using semver.gt
2025-03-19 21:03:08 -04:00
Barış Soner Uşaklı
459fe50cd6
Merge branch 'master' into develop
2025-03-11 11:55:11 -04:00
Barış Soner Uşaklı
1ca7b7ecce
test: fix inf loop if dirname results in same dir, ie \
2025-03-10 18:25:53 -04:00
Barış Soner Uşaklı
7ef36ab05b
Merge branch 'master' into develop
2025-03-10 18:13:21 -04:00
Barış Soner Uşaklı
c4e3139599
lint: missing semi
2025-03-10 18:13:16 -04:00
Barış Soner Uşaklı
f9ce92df98
Merge branch 'master' into develop
2025-03-10 17:59:58 -04:00
Barış Soner Uşaklı
e775564fc1
refactor: prevent following symlinks
2025-03-10 17:59:31 -04:00
Barış Soner Uşaklı
76896859fa
fix: check if folder exists when uploading files in acp
2025-03-10 16:49:40 -04:00
Barış Soner Uşaklı
6d74ee2f59
refactor: show simple error if path doesn't exist
2025-03-10 16:20:51 -04:00
Barış Soner Uşaklı
810e8dbbbf
fix: sanitize category svg image files
2025-03-10 15:51:43 -04:00
Julian Lam
14fd33ce8f
fix : #13100 , direct access to a tag page no longer excludes cid -1
2025-03-07 14:04:36 -05:00
Julian Lam
6c26d9f4a3
feat: add line to description exposing a category's handle if accessible by fediverse pseudo-user, closes #13126
2025-03-03 15:03:21 -05:00
Julian Lam
f1c2b2be04
Merge branch 'master' into develop
2025-02-27 13:34:28 -05:00
Julian Lam
428300de4f
fix: scheduled topics and posts should return 404 on AP request
2025-02-27 13:34:21 -05:00
Barış Soner Uşaklı
a3596772ec
Merge branch 'master' into develop
2025-02-22 17:12:52 -05:00
Barış Soner Uşaklı
2c83056778
fix : #13193 , add lang strings
2025-02-22 17:12:45 -05:00
Barış Soner Uşaklı
e7b439a892
Merge branch 'master' into develop
2025-02-21 12:57:13 -05:00
Barış Soner Uşaklı
9bfa885392
fix: escape confirm email in acp manage users
2025-02-21 11:30:50 -05:00
Barış Soner Uşaklı
c6b8256fff
fix: add missing await on filter:user.logout
...
if there is an error in logout hooks don't crash send error back instead of building 500 page
2025-02-21 11:27:52 -05:00