13e049d772
Allow cross-origin requests to /.well-known/* URLs. ( #9083 )
...
Right now, this includes three endpoints: host-meta, webfinger, and change-password.
host-meta and webfinger are publicly available and do not use any authentication. Nothing bad can be done by accessing them in a user's browser.
change-password being CORS-enabled will only reveal the URL it redirects to (which is /auth/edit) but not anything about the actual /auth/edit page, because it does not have CORS enabled.
The documentation for hosting an instance on a different domain should also be updated to point out that Access-Control-Allow-Origin: * should be set at a minimum for the /.well-known/host-meta redirect to allow browser-based non-proxied instance discovery.
6 years ago
4ea718ef18
Migrate all old direct messages to new conversations schema ( #9085 )
6 years ago
9b5348240e
Add consistent interpolations check to CircleCI ( #9072 )
...
* Add consistent interpolations check to CircleCI
* Fix locale strings using wrong variables
6 years ago
e8ffecbd36
Set @body_classes to admin layout ( #9081 )
6 years ago
df3a7e724d
Fix missing plural keys ( #9084 )
...
* Update i18n-tasks to feature-missing-plural-keys
* Fix pluralizations with missing keys in Arabic
Fix #8554
* Add i18n-tasks missing-plural-keys to CircleCI
6 years ago
d723f2a0a8
Fix RTL layout of status display names ( #9075 )
...
Fix #2350
6 years ago
288e435fe5
Show upload options on click as well as hover ( #9074 )
...
Fix #8918
6 years ago
9f3283086f
Bump capybara from 3.9.0 to 3.10.0 ( #9077 )
...
Bumps [capybara](https://github.com/teamcapybara/capybara ) from 3.9.0 to 3.10.0.
- [Release notes](https://github.com/teamcapybara/capybara/releases )
- [Changelog](https://github.com/teamcapybara/capybara/blob/master/History.md )
- [Commits](https://github.com/teamcapybara/capybara/compare/3.9.0...3.10.0 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
c64234c31f
Bump rspec-rails from 3.8.0 to 3.8.1 ( #9078 )
...
Bumps [rspec-rails](https://github.com/rspec/rspec-rails ) from 3.8.0 to 3.8.1.
- [Release notes](https://github.com/rspec/rspec-rails/releases )
- [Changelog](https://github.com/rspec/rspec-rails/blob/master/Changelog.md )
- [Commits](https://github.com/rspec/rspec-rails/compare/v3.8.0...v3.8.1 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
c61af83de0
Bump i18n-tasks from 0.9.26 to 0.9.27 ( #9079 )
...
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks ) from 0.9.26 to 0.9.27.
- [Release notes](https://github.com/glebm/i18n-tasks/releases )
- [Changelog](https://github.com/glebm/i18n-tasks/blob/master/CHANGES.md )
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.26...v0.9.27 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
01c169e796
Fix JS error when posting from page without router context ( #9073 )
...
Fix #9057
6 years ago
e3a1955276
Bump i18n-tasks from 0.9.25 to 0.9.26 ( #9071 )
...
Bumps [i18n-tasks](https://github.com/glebm/i18n-tasks ) from 0.9.25 to 0.9.26.
- [Release notes](https://github.com/glebm/i18n-tasks/releases )
- [Changelog](https://github.com/glebm/i18n-tasks/blob/master/CHANGES.md )
- [Commits](https://github.com/glebm/i18n-tasks/compare/v0.9.25...v0.9.26 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
65867b6e61
Bump parallel_tests from 2.23.0 to 2.24.0 ( #9064 )
...
Bumps [parallel_tests](https://github.com/grosser/parallel_tests ) from 2.23.0 to 2.24.0.
- [Release notes](https://github.com/grosser/parallel_tests/releases )
- [Commits](https://github.com/grosser/parallel_tests/compare/v2.23.0...v2.24.0 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
51677ff070
Update Dockerfile ( #9026 )
6 years ago
39abec4d25
Fix public timelines not instantly updating on compose ( #9050 )
...
Fix #9034
6 years ago
ad510db3a1
Show suggested follows on search screen in mobile layout ( #9010 )
...
Reminder: Suggestions were added in #7918 and are based on who you
interact with who you do not follow. E.g. if you boost someone a lot
from seeing other people's boosts of that person, it makes sense you
might be interested in following the original source; or if you reply
to someone a lot, maybe you'd want to follow them
Each suggestion can be dismissed
6 years ago
969a10a5d1
Persist volumes by default in docker-compose ( #9055 )
...
Too many databases were lost to this
6 years ago
81017eaea7
Revert "RTL: remove blank character inside bdi ( #9038 )" ( #9056 )
...
This reverts commit c7e9f9ff1e
6 years ago
4f0bdbaaaf
Downgrade fog-openstack to 0.3.7 and fog-core to 2.1.0 ( #9049 )
...
Fix #8889
6 years ago
f5b8bd4392
Fix cull tripping on nil in last_webfingered_at ( #9051 )
...
Fix #8741
6 years ago
c7e9f9ff1e
RTL: remove blank character inside bdi ( #9038 )
...
* RTL: remove blank character inside bdi
* Update app/javascript/mastodon/components/display_name.js
Co-Authored-By: mabkenar <ampbox@gmail.com>
6 years ago
2e18ad74dc
Fix tootctl cull on dead servers ( #9041 )
...
* Delete first 9 accounts on dead servers
* Clean up code by moving dead server culling to the end
6 years ago
84cf78da8a
Fix og:url on toots' public view ( #9047 )
...
Fixes #9045
6 years ago
c73864c137
RTL: fix cardbar margins and alignment ( #9044 )
6 years ago
3a157210c8
RTL: fix admin account avatar margin in about page ( #9039 )
...
* RTL: fix admin account avatar margin in about page
* fix code style
6 years ago
68f0e4d54e
Handle if username is not found on tootctl feeds build ( #9040 )
6 years ago
8d70d3de38
Fix crash when using UNIX socket ( #9036 )
6 years ago
bf58461d36
RTL: fix column settings toggle label ( #9037 )
6 years ago
25f9ead041
Fix domain label position and color ( #9033 )
...
* Fix position of the domain label
* Fix position of the domain label for RTL
- Fix color mismatch of linear gradient which assigned to "::after" pseudo class
6 years ago
f468bfb830
Bump version to 2.6.0rc1 ( #9025 )
...
* Bump version to 2.6.0rc1
* Update AUTHORS.md
* Update CHANGELOG.md
6 years ago
33976c8ecc
fix: Execute PAM authentication tests on CircleCI ( #9029 )
...
and use 'if' option of context block
6 years ago
fd5285658f
Add option to block reports from domain ( #8830 )
6 years ago
d5bfba3262
Do not test PAM authentication by default ( #9027 )
...
* Do not test PAM authentication by default
* Disable PAM tests if PAM is not enabled
6 years ago
9486f0ca77
Add "disable" button to report screen ( #9024 )
...
* Add "disable" button to report screen
* i18n-tasks remove-unused
6 years ago
369cc5f555
Check if port/socket is available before forking in Streaming API ( #9023 )
...
Previously, the server would attempt taking port/socket in worker
process, and if it was taken, fail, which made the master process
create a new worker. This led to really high CPU usage if the
streaming API was started when the port or socket were not
available.
Now, before clustering (forking) into worker processes, a test
server is created and then removed to check if it can be done.
6 years ago
eb1b9903a6
Redesign direct messages column ( #9022 )
6 years ago
029943d59b
RTL: fix preferences layout ( #9021 )
6 years ago
065b39e7a4
Fix admin account avatar margin ( #9020 )
6 years ago
6c91f1a5b3
Bump strong_migrations from 0.3.0 to 0.3.1 ( #9015 )
...
Bumps [strong_migrations](https://github.com/ankane/strong_migrations ) from 0.3.0 to 0.3.1.
- [Release notes](https://github.com/ankane/strong_migrations/releases )
- [Changelog](https://github.com/ankane/strong_migrations/blob/master/CHANGELOG.md )
- [Commits](https://github.com/ankane/strong_migrations/compare/v0.3.0...v0.3.1 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
3abab56650
Improve README ( #9012 )
...
* Improve README
* Update README.md
* Update README.md
* Update README.md
* Update README.md
6 years ago
890968603b
Update CONTRIBUTING.md ( #9014 )
...
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
* Update CONTRIBUTING.md
6 years ago
c7b9e6f479
Bump tzinfo-data from 1.2018.5 to 1.2018.6 ( #9016 )
...
Bumps [tzinfo-data](https://github.com/tzinfo/tzinfo-data ) from 1.2018.5 to 1.2018.6.
- [Release notes](https://github.com/tzinfo/tzinfo-data/releases )
- [Commits](https://github.com/tzinfo/tzinfo-data/compare/v1.2018.5...v1.2018.6 )
Signed-off-by: dependabot[bot] <support@dependabot.com>
6 years ago
301cbcc980
RTL: fix user stats in about page ( #9018 )
6 years ago
a38a452481
Add unread indicator to conversations ( #9009 )
6 years ago
bebe8ec887
fix: initial state of PrivacyDropdown is should not be null ( #9008 )
6 years ago
e5762875a4
Use Ruby ==2.5.2== 2.5.3 ( #9003 )
...
* Use Ruby 2.5.2
* Specify 2.5.2p104 as RUBY VERSION
Heorku refers to RUBY VERSION in Gemfile.lock
* Use ruby-2.5.3
6 years ago
65b3804a6c
RTL: fix domain append at signup form ( #9007 )
6 years ago
007f7690fa
Fix fav/boosts hotkeys not working on detailed statuses ( #9006 )
6 years ago
f8c1b32541
RTL: fix admin account margins in about page ( #9005 )
6 years ago
72d7d3003b
Do not show "limited" visibility in default visibility preference ( #8999 )
...
* Do not show "limited" visibility in default visibility preference
Fix regression from #8950
* Fix code style issue
6 years ago
Ben Lubar
Eugen Rochko
Yamagishi Kazutoshi
dependabot[bot]
ashleyhull-versent
Masoud Abkenar
Jeong Arm
ThibG
Gomasy
kedama
takayamaki
bsky
Daigo 3 Dango