Commit Graph

680 Commits

Author SHA1 Message Date
f831452037 Refactor Snowflake to avoid brakeman sql injection warnings (#25879) 2023-07-12 10:44:58 +02:00
b8b2470cf8 Fix Style/SlicingWithRange cop (#25923) 2023-07-12 10:03:06 +02:00
1d557305d2 Enable Rubocop Style/FrozenStringLiteralComment (#23793) 2023-07-12 09:47:08 +02:00
0051128387 Bump version to v4.1.4 (#25805) 2023-07-07 19:42:03 +02:00
71d44949bf Fix branding:generate_app_icons failing because of disallowed ICO coder (#25794) 2023-07-07 18:10:00 +02:00
5e1752ce3f Bump version to v4.1.3 (#25757) 2023-07-06 15:14:42 +02:00
dc8f1fbd97 Merge pull request from GHSA-9928-3cp5-93fm
* Fix attachments getting processed despite failing content-type validation

* Add a restrictive ImageMagick security policy tailored for Mastodon

* Fix misdetection of MP3 files with large cover art

* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
6d8e0fae3e Merge pull request from GHSA-ccm4-vgcc-73hp
* Tighten allowed HTML in oEmbed-based preview cards

* Sanitize preview cards at render time

* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
fed9cbfd2b Add hardened headers to user-uploaded files (#25756) 2023-07-06 14:31:37 +02:00
c78280a8ce Add translate="no" to outgoing mentions and links (#25524) 2023-06-20 18:10:19 +02:00
b5675e265e Add coverage for CLI::Feeds command (#25319) 2023-06-10 18:37:36 +02:00
07933db788 Add coverage for CLI::Cache command (#25238) 2023-06-10 18:36:09 +02:00
c66250abf1 Autofix Rubocop Regex Style rules (#23690)
Co-authored-by: Claire <claire.github-309c@sitedethib.com>
2023-06-06 14:50:51 +02:00
768b00c4d0 Consistently use middle dot (·) instead of bullet (•) to separate items (#25248) 2023-06-02 19:58:18 +02:00
cd4f0feab8 Extract verify options method in search cli (#25121) 2023-06-01 14:35:05 +02:00
35c1c3e57a Add CLI area progress bar helper (#25208) 2023-06-01 14:31:24 +02:00
dc26140d54 Use thor methods instead of tty prompt in maintenance cli (#25207) 2023-05-31 19:40:16 +02:00
1baf40077b Fix FormatStringToken cop in CLI (#25122) 2023-05-30 16:21:53 +02:00
80c7de9984 Fix Rails/WhereExists cop in CLI (#25123) 2023-05-30 16:09:57 +02:00
b7b96efd17 Extract helper method for error report in cli/accounts command (#25119) 2023-05-30 16:09:15 +02:00
2cecb2dc9e Increment index which was previously not used in maintenance CLI loop (#25118) 2023-05-30 16:08:47 +02:00
ec9bc7e604 Consistent usage of CLI dry_run? method (#25116) 2023-05-30 16:07:44 +02:00
55785b1603 Extract methods for user de-duping in maintenance CLI (#25117) 2023-05-26 09:42:16 +02:00
1d588d58f1 Improve various queries against account domains (#25126) 2023-05-25 09:27:16 +02:00
384345b0de Add CLI Base class for command line code (#25106) 2023-05-24 11:55:40 +02:00
b6b4ea4ca5 Move the mastodon/*_cli files to mastodon/cli/* (#24139) 2023-05-23 16:08:26 +02:00
99e2e9b81f Fix minor typos in comments and spec names (#21831) 2023-05-19 17:13:29 +02:00
536dd046d4 Add ability to block sign-ups from IP using the CLI (#24870) 2023-05-09 14:46:00 +02:00
ffb3fef7db Fix uncaught ActiveRecord::StatementInvalid in Mastodon::IpBlocksCLI (#24861) 2023-05-09 14:45:47 +02:00
830e6cefae Add version suffixes to nightly & edge image builds (#24823) 2023-05-04 13:45:39 +02:00
569b39256b Bump rubocop-rails 2.19.1 with update .rubocop_todo.yml (#24469) 2023-05-04 11:56:24 +02:00
da3bd913ae Autofix Rubocop Style/HashSyntax (#23754) 2023-05-04 05:54:26 +02:00
2c6c398c60 Fix Performance/CollectionLiteralInLoop cop (#24819) 2023-05-04 05:33:55 +02:00
24491abf6d Fix Rails/DeprecatedActiveModelErrorsMethods cop (#24742) 2023-05-02 18:39:22 +02:00
5e060e1f44 Fix Performance/Sum cop (#24788) 2023-05-02 16:10:40 +02:00
1ed0ff30d3 Fix tootctl accounts cull crashing when encountering a domain resolving to a private address (#23378) 2023-05-02 15:10:09 +02:00
88d33f361f Fix Lint/DuplicateBranch cop (#24766) 2023-05-02 12:57:11 +02:00
e8fe941015 Fix tootctl accounts approve --number N not aproving N earliest registrations (#24605) 2023-04-30 06:50:58 +02:00
2e43461100 Fix Rails/Output cop (#24687) 2023-04-30 06:48:16 +02:00
60ac9e8634 Fix Rails/SquishedSQLHeredocs cop (#24694) 2023-04-30 06:43:50 +02:00
1d9969fadf Fix tootctl accounts create --reattach --force not working with confirmed accounts (#24680) 2023-04-27 10:15:45 +02:00
528b8e7e3a Fix crash in tootctl accounts create --reattach --force (#24557) 2023-04-23 22:29:31 +02:00
faf657d709 Fix uncaught ActiveRecord::StatementInvalid exception in Mastodon::AccountsCLI#approve (#24590) 2023-04-20 10:57:11 +02:00
e98c86050a Refactor Cache-Control and Vary definitions (#24347) 2023-04-19 16:07:29 +02:00
3afa1fda7a Fix email confirmation skip option in tootctl accounts modify USERNAME --email EMAIL --confirm (#24578) 2023-04-18 09:51:24 +02:00
b0800d602e tootctl: add --approve option to tootctl accounts create (#24533) 2023-04-14 14:41:15 +02:00
a2a66300d9 Clean up the post deployment migration generator (#24233) 2023-04-11 11:25:29 +02:00
3d8bd093b9 Bump version to v4.1.2 (#24427) 2023-04-07 09:01:57 +02:00
5c499f54e3 Change root Chewy strategy to emit a warning instead of erroring out in production mode (#24327) 2023-04-03 15:05:39 +02:00
2f7c3cb628 Update redis_config.rb to remove warning message (#24352) 2023-04-02 06:49:37 +02:00