Ariadne Conill
04bcf42d17
th: Merge pull request 'Incorporate glitch changes as of 2023-07-06' ( #62 ) from test-merge-2023-07-04 into main
...
Reviewed-on: https://gitea.treehouse.systems/treehouse/mastodon/pulls/62
2023-07-06 20:27:32 +00:00
Kouhai
adc5608efc
th: force ci
2023-07-06 12:34:15 -07:00
Kouhai
234f7cc84e
th: Merge remote-tracking branch 'glitch/main'
...
fixes: CVE-2023-36459
fixes: CVE-2023-36460
fixes: CVE-2023-36461
fixes: CVE-2023-36462
fixes: GHSA-55j9-c3mp-6fcq
fixes: GHSA-9928-3cp5-93fm
fixes: GHSA-9pxv-6qvf-pjwc
fixes: GHSA-ccm4-vgcc-73hp
2023-07-06 12:12:21 -07:00
Claire
15416cb567
Merge pull request #2274 from ClearlyClaire/glitch-soc/merge-upstream
...
Merge upstream changes
2023-07-06 15:21:10 +02:00
Claire
c25ba31e95
Merge pull request #2274 from ClearlyClaire/glitch-soc/merge-upstream
...
Merge upstream changes
2023-07-06 15:21:10 +02:00
Claire
3581e4be49
Merge branch 'main' into glitch-soc/merge-upstream
2023-07-06 15:16:34 +02:00
Claire
ff7aae3037
Merge branch 'main' into glitch-soc/merge-upstream
2023-07-06 15:16:34 +02:00
Claire
8f62bea002
Bump version to v4.1.3 ( #25757 )
2023-07-06 15:14:42 +02:00
Claire
5e1752ce3f
Bump version to v4.1.3 ( #25757 )
2023-07-06 15:14:42 +02:00
Claire
dab0be5aed
Merge pull request from GHSA-55j9-c3mp-6fcq
2023-07-06 15:06:49 +02:00
Claire
610731b03d
Merge pull request from GHSA-55j9-c3mp-6fcq
2023-07-06 15:06:49 +02:00
Claire
d7ed682130
Merge pull request from GHSA-9pxv-6qvf-pjwc
...
* Fix timeout handling of outbound HTTP requests
* Use CLOCK_MONOTONIC instead of Time.now
2023-07-06 15:06:23 +02:00
Claire
c5929798bf
Merge pull request from GHSA-9pxv-6qvf-pjwc
...
* Fix timeout handling of outbound HTTP requests
* Use CLOCK_MONOTONIC instead of Time.now
2023-07-06 15:06:23 +02:00
Claire
3445bdfa45
Merge pull request from GHSA-9928-3cp5-93fm
...
* Fix attachments getting processed despite failing content-type validation
* Add a restrictive ImageMagick security policy tailored for Mastodon
* Fix misdetection of MP3 files with large cover art
* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
Claire
dc8f1fbd97
Merge pull request from GHSA-9928-3cp5-93fm
...
* Fix attachments getting processed despite failing content-type validation
* Add a restrictive ImageMagick security policy tailored for Mastodon
* Fix misdetection of MP3 files with large cover art
* Reject unprocessable audio/video files instead of keeping them unchanged
2023-07-06 15:05:05 +02:00
Claire
96dcfa9745
Merge pull request from GHSA-ccm4-vgcc-73hp
...
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
Claire
6d8e0fae3e
Merge pull request from GHSA-ccm4-vgcc-73hp
...
* Tighten allowed HTML in oEmbed-based preview cards
* Sanitize preview cards at render time
* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
Claire
5154acdb9f
Add hardened headers to user-uploaded files ( #25756 )
2023-07-06 14:31:37 +02:00
Claire
fed9cbfd2b
Add hardened headers to user-uploaded files ( #25756 )
2023-07-06 14:31:37 +02:00
Kouhai
547d0e1ba4
th: reduce ci clone depth
2023-07-06 02:47:21 -07:00
Kouhai
c436a17459
th: quieter yarn please
...
yarn cache logs make woodpecker webui lag. this is not ideal.
2023-07-06 02:47:21 -07:00
Claire
41d0d67835
Merge pull request #2272 from ClearlyClaire/glitch-soc/merge-upstream
...
Merge upstream changes
2023-07-05 16:47:23 +02:00
Claire
30ad9d976b
Merge pull request #2272 from ClearlyClaire/glitch-soc/merge-upstream
...
Merge upstream changes
2023-07-05 16:47:23 +02:00
Eugen Rochko
3676bc46da
[Glitch] Fix regression of icon button colors in web UI
...
Port 12c6337c96
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 13:31:26 +02:00
Eugen Rochko
c0fa85b8dd
[Glitch] Fix regression of icon button colors in web UI
...
Port 69e124e2ed
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 13:31:26 +02:00
Trevor Wolf
fa02ad3b8c
[Glitch] Change button colors to increase hover/focus contrast and consistency
...
Port 5f31104e1f
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 13:30:52 +02:00
Trevor Wolf
4719d88117
[Glitch] Change button colors to increase hover/focus contrast and consistency
...
Port 54cb679c19
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 13:30:52 +02:00
Eugen Rochko
c66faebe43
[Glitch] Add button to see results for polls in web UI
...
Port 5b05451744
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:42:24 +02:00
Eugen Rochko
a117c953d0
[Glitch] Add button to see results for polls in web UI
...
Port b7910bc751
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:42:24 +02:00
Eugen Rochko
7747947353
[Glitch] Add canonical link tags in web UI
...
Port 90911f4396
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:41:52 +02:00
Eugen Rochko
b3f209370b
[Glitch] Add canonical link tags in web UI
...
Port 000b835803
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:41:52 +02:00
mogaminsk
0003a22bc1
[Glitch] Fix local live feeds does not expand
...
Port f3ca8aede9
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:39:46 +02:00
mogaminsk
c6246807f5
[Glitch] Fix local live feeds does not expand
...
Port 6268188543
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:39:46 +02:00
forsamori
136ed77764
[Glitch] Add at-symbol prepended to mention span title
...
Port 7731fbbba7
to glitch-soc
Co-authored-by: Sam BC <samuel.balbirnie-cumming@xdesign.com>
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:38:54 +02:00
forsamori
ac74374311
[Glitch] Add at-symbol prepended to mention span title
...
Port d9a5c1acfa
to glitch-soc
Co-authored-by: Sam BC <samuel.balbirnie-cumming@xdesign.com>
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:38:54 +02:00
Eugen Rochko
5b328d07e6
[Glitch] Change labels of live feeds tabs in web UI
...
Port 80fee1403f
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:37:37 +02:00
Eugen Rochko
0a5271629c
[Glitch] Change labels of live feeds tabs in web UI
...
Port 54a10523e2
to glitch-soc
Signed-off-by: Claire <claire.github-309c@sitedethib.com>
2023-07-05 12:37:37 +02:00
Claire
784f2f35bc
Merge branch 'main' into glitch-soc/merge-upstream
2023-07-05 12:01:26 +02:00
Claire
5de49e74d4
Merge branch 'main' into glitch-soc/merge-upstream
2023-07-05 12:01:26 +02:00
Eugen Rochko
90911f4396
Add canonical link tags in web UI ( #25715 )
2023-07-05 11:25:27 +02:00
Eugen Rochko
000b835803
Add canonical link tags in web UI ( #25715 )
2023-07-05 11:25:27 +02:00
Kouhai
d0edb9444c
th: run haml-lint on quote haml
2023-07-05 01:50:54 -07:00
Kouhai
c03ac30374
th: invite limit nonfixited bugs
2023-07-05 01:50:54 -07:00
Kouhai
419acc1ef7
th: update haml-lint for autocorrect
2023-07-05 01:49:42 -07:00
Kouhai
93d9e16cfc
th: oops, foreman's back
2023-07-05 01:49:42 -07:00
Eugen Rochko
5b05451744
Add button to see results for polls in web UI ( #25726 )
2023-07-05 10:32:04 +02:00
Eugen Rochko
b7910bc751
Add button to see results for polls in web UI ( #25726 )
2023-07-05 10:32:04 +02:00
Kouhai
fa0f31a8fb
th: merge glitch again (lol)
2023-07-05 01:14:10 -07:00
Kouhai
7116903afd
th: update ruby
2023-07-05 00:27:37 -07:00
Kouhai
45dad06f1c
th: update node base docker
2023-07-05 00:24:27 -07:00