Gavin Mogan
70584b47c5
Fixes for items highlighted by review.ai
...
* Consider using `hash_equals()` instead of `==` when comparing the state values to prevent timing attacks:
`abort_unless(hash_equals($request->input('state'), $request->session()->pull('oauth2state')), 400, 'invalid
state');`
* For better data integrity, consider adding a foreign key constraint to the user_id column: `$table-
>foreign('user_id')->references('id')->on('users')->onDelete('cascade');`
* Does the OIDC provider guarantee that the username field exists in the userInfo data? Consider adding a
null check or fallback: `$userInfoData[config('remote-auth.oidc.field_username')] ?? null`
2025-04-24 21:28:44 -07:00
Gavin Mogan
441c8e0d4c
Generic OIDC Support
...
* Everything should be configurable by env variables
* Basic request tests
2025-04-24 21:28:44 -07:00
daniel
89191b8e0b
Merge pull request #5944 from eufelipemateus/translate-custom-filter
...
[Translation] Translate custom filter
2025-04-20 14:07:38 -06:00
daniel
6320882b47
Merge pull request #5946 from maco/5201-alt-text-limits
...
[bug fix] use configured alt text length limit when uploading multiple photos
2025-04-20 14:05:47 -06:00
daniel
8975b8e300
Merge pull request #5947 from maco/popover-on-shared-post
...
[improvement] in notifications sidebar, show popover on shared posts too, not just liked posts
2025-04-20 14:05:00 -06:00
daniel
caf24907a2
Merge pull request #5948 from maco/case-insensitive-tagging
...
[bug fix] use case insensitive search when tagging accounts
2025-04-20 14:00:59 -06:00
Mackenzie Morgan
9966260a91
use case insensitive search when tagging accounts
2025-04-19 12:41:53 -04:00
Mackenzie Morgan
f2181e2478
in notifications sidebar, show popover on shared posts too, not just liked posts
2025-04-19 12:26:38 -04:00
Mackenzie Morgan
15758b0b4b
use configured alt text length limit when uploading multiple photos
2025-04-19 12:15:06 -04:00
Felipe Mateus
a676c1ffee
translate custom filter
2025-04-18 22:09:52 -03:00
daniel
3d6348225b
Merge pull request #5928 from pixelfed/staging
...
Add custom filters
2025-04-14 05:44:47 -06:00
Daniel Supernault
fc77a98f7b
Update CustomFilterController, remove statuses check as we dont support them yet
2025-04-14 05:34:51 -06:00
Daniel Supernault
87cf6fd850
Update changelog
2025-04-14 05:28:41 -06:00
Daniel Supernault
86c8be8e4b
Update compiled assets
2025-04-14 05:27:03 -06:00
Daniel Supernault
f72a054fe8
Update TimelineStatus, adjust custom filter warning design
2025-04-14 05:25:34 -06:00
Daniel Supernault
a010c860e0
Update npm deps
2025-04-14 05:02:31 -06:00
Daniel Supernault
dfd628ed90
Update api routes, add custom filter endpoints
2025-04-14 04:58:14 -06:00
Daniel Supernault
d5835362ab
Update FilterModal, fix keyword delete bug
2025-04-14 04:55:59 -06:00
Daniel Supernault
c1f2dfb013
Update WebfingerService, apply banned domains to webfinger logic
2025-04-14 04:54:13 -06:00
Daniel Supernault
5f5ed1e62d
Update ComposeController, fix tag mention bug. Closes #5885
2025-04-14 04:52:53 -06:00
Daniel Supernault
1356757715
Add webfinger validation rule
2025-04-14 04:51:30 -06:00
Daniel Supernault
5a32bfe304
Update ApiV1Controller, add Custom Filters to home/public and hashtag feeds
2025-04-14 04:50:33 -06:00
Daniel Supernault
77044ba193
Update CustomFilter model, add custom limits for max_content_scan_limit, max_filters_per_user, max_keywords_per_filter, max_keyword_length, max_pattern_length, max_reported_matches, max_create_per_hour, max_updates_per_hour so admins have more control over this feature
2025-04-14 04:49:33 -06:00
Daniel Supernault
578718c606
Update CustomFilterKeyword model, add setKeywordAttribute method
2025-04-14 04:46:17 -06:00
Daniel Supernault
c4a96da019
Update CustomFilterController, improve case-insentive handling, mastoAPI compatibility and custom config limits
2025-04-14 04:45:09 -06:00
Daniel Supernault
a16a4ddbd0
Update Hashtag component, add custom filter support
2025-04-14 01:37:35 -06:00
Daniel Supernault
b86102823b
Update CustomFilter model and CustomFilterController
2025-04-14 01:18:14 -06:00
Daniel Supernault
168816db2d
Update CustomFilterController
2025-04-14 00:30:53 -06:00
Daniel Supernault
3ff54b9ea6
Updaet CustomFilter model
2025-04-14 00:27:44 -06:00
Daniel Supernault
9ab1e0c84b
Update CustomFilterPolicy
2025-04-14 00:21:57 -06:00
Daniel Supernault
adc4cffc38
Add custom filter components
2025-04-14 00:07:25 -06:00
Daniel Supernault
1b048664b7
Add Filter components
2025-04-13 23:49:53 -06:00
Daniel Supernault
7d6f7c48ef
Update PostContent, TimelineStatus and PhotoPresenter components to support filters
2025-04-13 23:25:52 -06:00
Daniel Supernault
f0b1a8eaae
Update changelog
2025-04-08 06:18:45 -06:00
Daniel Supernault
437d742ac4
Add custom filters
...
Add custom filters, compatible with Mastodon `/api/v2/filters`
Todo:
- [ ] fix routes
- [ ] finish other context filtering
2025-04-08 05:58:06 -06:00
daniel
e5dc95953a
Merge pull request #5927 from pixelfed/staging
...
Update ReportController, fix type validation
2025-04-08 05:18:34 -06:00
Daniel Supernault
ccc7f2fc69
Update ReportController, fix type validation
2025-04-08 05:17:40 -06:00
daniel
87887f4c67
Merge pull request #5926 from pixelfed/staging
...
Staging
2025-04-08 04:10:19 -06:00
daniel
f483884dfa
Merge branch 'dev' into staging
2025-04-08 04:09:54 -06:00
Daniel Supernault
d8bdba7d97
Update changelog
2025-04-08 04:09:02 -06:00
Daniel Supernault
31dd1ab350
Update private settings, change "Private Account" to "Manually Review Follow Requests"
2025-04-08 04:08:31 -06:00
Daniel Supernault
475d1d6279
Update report views, fix missing forms
2025-04-08 04:00:43 -06:00
Daniel Supernault
32fc3180c8
Update DiscoverController, improve public hashtag feed. Fixes #5866
2025-04-08 03:32:12 -06:00
daniel
0158941fb6
API improvements + test fixes ( #5925 )
...
* migrate PHPUnit configuration
* replace @test annotations with #[Test] attributes, and add it where it was missing
* remove test prefix from test method names
* add PHPUnit cache to .gitignore
* Update ApiV1Controller, fix notifications favourited/reblogged/bookmarked state. Fixes #5901
* Update ApiV1Controller, fix relationship fields. Fixes #5900
* Update instance config, return proper matrix limits. Fixes #4780
* Update SearchApiV2Service, fix offset bug. Fixes #5875
* Update ApiV1Controller, add better direct error message. Fixes #4789
* Update changelog
---------
Co-authored-by: Daniel Simon <daniel.simon.dev@proton.me>
2025-04-08 02:18:49 -06:00
Daniel Supernault
5ae13d7289
Update changelog
2025-04-08 02:18:07 -06:00
Daniel Supernault
658fe6898e
Update ApiV1Controller, add better direct error message. Fixes #4789
2025-04-08 02:17:24 -06:00
Daniel Supernault
0a98b7ad20
Update SearchApiV2Service, fix offset bug. Fixes #5875
2025-04-08 02:11:26 -06:00
Daniel Supernault
4732019087
Update instance config, return proper matrix limits. Fixes #4780
2025-04-08 01:46:49 -06:00
Daniel Supernault
245ab3bc4f
Update ApiV1Controller, fix relationship fields. Fixes #5900
2025-04-08 01:36:10 -06:00
Daniel Supernault
8a86808a06
Update ApiV1Controller, fix notifications favourited/reblogged/bookmarked state. Fixes #5901
2025-04-08 01:18:25 -06:00