zotlabs
|
80400d7191
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge
|
2017-09-05 17:35:56 -07:00 |
|
zotlabs
|
9ca7cc565b
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev_merge
|
2017-09-05 17:35:44 -07:00 |
|
zotlabs
|
6147f819ce
|
avoid a security patch and resultant compatibility issues; instead restrict the input characters we accept in token verification strings to hex digits. This will all be changing in the coming weeks/months anyway.
|
2017-09-05 17:12:31 -07:00 |
|
zotlabs
|
842a041a88
|
remove period from characters allowed in username, as this will mess up URL based content-type negotiation. It was previously disallowed but permitted a month or two ago after seeing Diaspora started allowing it. It's OK if they have it, but we can't; as many of our urls are based on username and theirs are primarily based on uid.
|
2017-09-05 16:38:55 -07:00 |
|
Mario Vavti
|
68a91ec3ea
|
32 characters are often not enough to distinguish gnu-social mids - use the entire mid. in /display if we are not dealing with posts (eg likes) provide the thr_parent mid as bParam_mid so we can still adress the right post in javascript
|
2017-09-05 23:18:02 +02:00 |
|
zotlabs
|
d58f965b9a
|
some more prep work for Zot VI - some of this will need to be undone or at least re-arranged later but we need to bootstrap a test environment.
|
2017-09-04 22:35:54 -07:00 |
|
zotlabs
|
83d0e48ebe
|
some preliminary work on Zot VI
|
2017-09-04 22:35:44 -07:00 |
|
zotlabs
|
ca58ef80ae
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge
|
2017-09-04 22:33:53 -07:00 |
|
zotlabs
|
0956dcadd3
|
some more prep work for Zot VI - some of this will need to be undone or at least re-arranged later but we need to bootstrap a test environment.
|
2017-09-04 22:30:55 -07:00 |
|
zotlabs
|
304c393f38
|
some preliminary work on Zot VI
|
2017-09-04 21:49:44 -07:00 |
|
zotlabs
|
05654e4980
|
card embed improved
|
2017-09-04 21:02:44 -07:00 |
|
Mario Vavti
|
c8000fca1f
|
Default Access Control List (ACL) -> Default Privacy Group and minor template fix
|
2017-09-04 20:48:26 +02:00 |
|
Mario Vavti
|
48547f5f9e
|
remove logging
|
2017-09-04 13:38:21 +02:00 |
|
Mario Vavti
|
b4f8136315
|
whitespace
|
2017-09-04 13:34:17 +02:00 |
|
Mario Vavti
|
06f1910ac0
|
fix the error reporting query in /display. we need item_deleted instead of item_flags and remove id = $item_hash from the query since we always provide the mid and never the id iirc
|
2017-09-04 13:28:49 +02:00 |
|
Mario Vavti
|
e4b0e31a28
|
remove hubzilla.nl from fallback directory servers
|
2017-09-04 10:14:27 +02:00 |
|
zotlabs
|
ba4f75ba19
|
also error if no security context
|
2017-09-03 23:58:52 -07:00 |
|
zotlabs
|
fc62f07a08
|
validate the security context
|
2017-09-03 23:50:18 -07:00 |
|
zotlabs
|
3d0a7f4fc5
|
paths in xchan_addr no longer means RSS specifically but could be activitypub
|
2017-09-03 22:09:16 -07:00 |
|
zotlabs
|
47ef41695a
|
sign zot-info packets with httpsignatures
|
2017-09-03 19:56:13 -07:00 |
|
zotlabs
|
4adf2caaa6
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge
|
2017-09-03 17:17:20 -07:00 |
|
zotlabs
|
db82d303e2
|
only validate headers that aren't "spoofable", which will be somewhat implementation dependent.
|
2017-09-03 17:12:42 -07:00 |
|
Mario Vavti
|
0fac35686b
|
Merge remote-tracking branch 'mike/master' into dev
|
2017-09-03 21:49:01 +02:00 |
|
Mario Vavti
|
5ae2d15dc0
|
this fixes an issue where in /channel/membername?mid=some_mid updates did not work when static updates were enabled. since in the current situation we always get a top-level-post mid, item_thread_top = 0 in the query will never return a result. change it to item_thread_top = 1
|
2017-09-03 21:41:47 +02:00 |
|
Mario Vavti
|
dc18440c18
|
introduce item_normal_update(). the differnce to item_normal() is that we do not query for item_deleted = 0 and therefor can find deleted likes which allows us to update our unlikes on the fly if static page update is enabled
|
2017-09-03 21:33:07 +02:00 |
|
zotlabs
|
499b7de0d2
|
Reviewed. This is OK.
Revert "may be exploitable in current form - awaiting review"
This reverts commit 7bff60edac.
|
2017-09-03 00:59:51 -07:00 |
|
Mario Vavti
|
1a0cf2666a
|
Merge remote-tracking branch 'mike/master' into dev
|
2017-09-02 23:52:31 +02:00 |
|
zotlabs
|
7bff60edac
|
may be exploitable in current form - awaiting review
|
2017-09-02 14:04:37 -07:00 |
|
Mario Vavti
|
e935473c5c
|
add combined index for item.uid and item.item_unseen. this speeds up notifications by a magnitude.
|
2017-09-01 21:27:59 +02:00 |
|
Mario Vavti
|
3af3b36db3
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev
|
2017-09-01 10:41:07 +02:00 |
|
git-marijus
|
9333503600
|
Merge pull request #850 from anaqreon/doco
Fix the multiple table of content bug
|
2017-09-01 10:40:24 +02:00 |
|
Mario Vavti
|
7a42aed1f6
|
Merge remote-tracking branch 'mike/master' into dev
|
2017-09-01 10:37:59 +02:00 |
|
zotlabs
|
5bffae6219
|
cut down on a few extraneous gprobe processes
|
2017-08-31 23:21:06 -07:00 |
|
zotlabs
|
ae8cdc3b42
|
some changes after testing server-to-server magic auth
|
2017-08-31 21:38:03 -07:00 |
|
zotlabs
|
b413beeb36
|
add server-to-server magic auth to dav and cdav controllers
|
2017-08-31 20:45:13 -07:00 |
|
zotlabs
|
0cf5536e90
|
server to server magic auth
|
2017-08-31 20:08:58 -07:00 |
|
zotlabs
|
5e767144c9
|
simplify api_auth
|
2017-08-31 19:09:07 -07:00 |
|
zotlabs
|
6d87311394
|
now letsencrypt is creating a .htaccess file with re-write rules which kills most of our .well-known routes
|
2017-08-31 17:47:32 -07:00 |
|
git-marijus
|
28d6b9ce16
|
changelog
|
2017-08-31 10:22:20 +02:00 |
|
zotlabs
|
aec92e0e17
|
whitespace
|
2017-08-30 23:16:57 -07:00 |
|
zotlabs
|
c364bff0c1
|
missing include
|
2017-08-30 21:57:56 -07:00 |
|
zotlabs
|
74f55d1504
|
check input is hex before sending it to hex2bin
|
2017-08-30 21:45:54 -07:00 |
|
zotlabs
|
f436ec6f21
|
some issues with mod_display on very first anonymous page visit (prior to any browser cookies being set)
|
2017-08-30 18:55:56 -07:00 |
|
zotlabs
|
be097bf415
|
issue with mentions and xchans with @ or /
|
2017-08-30 16:24:26 -07:00 |
|
zotlabs
|
f1b014b7eb
|
hubzilla issue #851
|
2017-08-29 23:58:17 -07:00 |
|
zotlabs
|
ad637b5b50
|
Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge
|
2017-08-29 23:38:23 -07:00 |
|
zotlabs
|
5abc9ef10b
|
bring back nomadic locations
|
2017-08-29 22:08:37 -07:00 |
|
zotlabs
|
d47df8663f
|
add a nonce
|
2017-08-29 20:57:30 -07:00 |
|
zotlabs
|
77267e049a
|
use iso 8601 "Zulu" for log timestamps so it can be easily processed with fail2ban
|
2017-08-29 20:47:49 -07:00 |
|
zotlabs
|
e2b6464f83
|
escape 'http' inside code blocks so it doesn't trigger an oembed
|
2017-08-29 20:07:26 -07:00 |
|