Oneric <oneric@oneric.stub> committed rPUBEfae0a14ee837: Use standard-compliant Accept header when fetching.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE024ffadd80ed: Merge pull request 'Don't list old accounts as aliases in WebFinger' (#713)….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE464db9ea0bf5: Don't list old accounts as aliases in WebFinger.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEdf25d86999cd: Cleaned up FEP-fffd commits a bit.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe2e4f53585e6: Merge pull request 'Use standard-compliant Accept header when fetching' (#740)….

Helge <helge.krueger@gmail.com> committed rPUBE5d89e0c9172b: Allow for url to be a list.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEe6ca2b4d2a67: Merge pull request 'Fix array-less EmojiReacts' (#739) from Oneric/akkoma:tag….

Oneric <oneric@oneric.stub> committed rPUBEdebd68641889: Add tests for our own custom emoji format.

Oneric <oneric@oneric.stub> committed rPUBE462225880ab6: Accept EmojiReacts with non-array tag.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE6ba80aaff589: Merge pull request 'Check if data is visible before embedding it in OG tags'….

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE05f8179d0819: check if data is visible before embedding it in OG tags.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE8e6017746639: Merge pull request 'MRF.InlineQuotePolicy: Add link to post URL, not ID' (#733)….

Oneric <oneric@oneric.stub> committed rPUBEfc95519dbfdf: Allow fetching over IPv6.

Oneric <oneric@oneric.stub> committed rPUBEd7c8e9df272a: static-fe: don’t squeeze non-square avatars.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE090a77d1af18: Merge pull request 'static-fe: don’t squeeze non-square images' (#705) from….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE75d9e2b37514: MRF.InlineQuotePolicy: Add link to post URL, not ID.

Floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE1135935cbe66: Merge remote-tracking branch 'oneric/ipv6' into develop.

Oneric <oneric@oneric.stub> committed rPUBE9598137d3293: Drop base_url special casing in test env.

Oneric <oneric@oneric.stub> committed rPUBEa0daec6ea10d: static-fe: don’t squeeze non-square emoji.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEb8393ad9ed00: Merge pull request 'context: add featured definition' (#717) from….

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBE8fbd771d6e1d: context: add featured & backgroundUrl definitions.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE0e066bddaefd: Merge pull request 'Drop base_url special casing in test env' (#737) from….

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE554f19a9eda4: Merge pull request 'Refresh Users much more aggressively when processing Move….

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE795524daf107: bump version.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE9c53a3390ec3: Ensure we have the emoji base path.

Erin Shepherd <erin.shepherd@e43.eu> committed rPUBEf18e2ba42ce8: Refresh Users much more aggressively when processing Move activities.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE2d439034ca80: Ensure that spoof-inserted does not time out.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE087d88f78778: bump version.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE4cd299bd8380: Add extra warnings if the uploader is on the same domain as the main application.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBEb5d97e7d85ff: Don't error out if we're not using the local uploader.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBEf59209020650: Fix tests that relied on no base_url in the uploader.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE61621ebdbc5b: Add tests for extra warnings about media subdomains.

Oneric <oneric@oneric.stub> committed rPUBEd44110120073: Add mix task to detect uploaded spoof payloads.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE3650bb03709b: Changelog entry.

Oneric <oneric@oneric.stub> committed rPUBE8684964c5d03: Only allow exact id matches.

Oneric <oneric@oneric.stub> committed rPUBE61ec592d6689: Drop obsolete pixelfed workaround.

Oneric <oneric@oneric.stub> committed rPUBEee7d98b09365: Update Changelog.

Oneric <oneric@oneric.stub> committed rPUBE0648d9ebaa57: Add mix tasks to detect spoofed posts and users.

Oneric <oneric@oneric.stub> committed rPUBE31f90bbb52db: Register APNG MIME type.

Oneric <oneric@oneric.stub> committed rPUBE9061d148bedb: Ensure object id doesn’t change on refetch.

Oneric <oneric@oneric.stub> committed rPUBE48b3a357930b: Update user reference after fetch.

Oneric <oneric@oneric.stub> committed rPUBEf07eb4cb55eb: Sanity check fetched user data.

Oneric <oneric@oneric.stub> committed rPUBE3e134b07fa4e: fetcher: return final URL after redirects from get_object.

Oneric <oneric@oneric.stub> committed rPUBEc4cf4d7f0bb1: Reject cross-domain redirects when fetching AP objects.

Oneric <oneric@oneric.stub> committed rPUBEbaaeffdebcf4: Update spoofed activity test.

Oneric <oneric@oneric.stub> committed rPUBEfee57eb376a4: Move actor check into fetch_and_contain_remote_object_from_id.

Oneric <oneric@oneric.stub> committed rPUBE59a142e0b0e6: Never fetch resource from ourselves.

Oneric <oneric@oneric.stub> committed rPUBEc806adbfdbea: Refactor Fetcher.get_object for readability.

Oneric <oneric@oneric.stub> committed rPUBE6d003e1acdf4: test/steal_emoji: consolidate configuration setup.

Oneric <oneric@oneric.stub> committed rPUBEddd79ff22d7e: Proactively harden emoji pack against path traversal.

Oneric <oneric@oneric.stub> committed rPUBE2bcf633dc286: Document Pleroma.Object.Fetcher.

Oneric <oneric@oneric.stub> committed rPUBEd1ce5fd91154: test/steal_emoji: reduce code duplication with mock macro.

Oneric <oneric@oneric.stub> committed rPUBE93ab6a018e96: mix: fix docs task.

Oneric <oneric@oneric.stub> committed rPUBEd6d838cbe83e: StealEmoji: check remote size before downloading.

Oneric <oneric@oneric.stub> committed rPUBEa4fa2ec9af76: StealEmoji: make final paths infeasible to predict.

Oneric <oneric@oneric.stub> committed rPUBEd1c4d0740467: Convert StealEmoji to pack.json.

Oneric <oneric@oneric.stub> committed rPUBEfa98b44acf9f: Fill out path for newly created packs.

Oneric <oneric@oneric.stub> committed rPUBEee5ce87825d5: test: use pack functions to check for emoji.

Oneric <oneric@oneric.stub> committed rPUBE5b126567bb6c: StealEmoji: drop superfluous basename.

Oneric <oneric@oneric.stub> committed rPUBE111cdb0d86f5: Split steal_emoji function for better readability.

Oneric <oneric@oneric.stub> committed rPUBEfb54c47f0b73: Update example nginx config.

Oneric <oneric@oneric.stub> committed rPUBEaf041db6dc44: Limit emoji stealer to alphanum, dash, or underscore characters (authored by Norm <normandy@biribiri.dev>).

Oneric <oneric@oneric.stub> committed rPUBEa8c6c780b4e0: StealEmoji: use Content-Type and reject non-images.

Oneric <oneric@oneric.stub> committed rPUBEfc36b0401630: Drop media proxy same-domain default for base_url.

Oneric <oneric@oneric.stub> committed rPUBEe88d0a28536c: Fix Content-Type of our schema.

Oneric <oneric@oneric.stub> committed rPUBEba558c0c242f: Limit instance emoji to image types.

Oneric <oneric@oneric.stub> committed rPUBE11ae8344eb62: Sanitise Content-Type of media proxy URLs.

Oneric <oneric@oneric.stub> committed rPUBE0ec62acb9dc1: Always insert Dedupe upload filter.

Oneric <oneric@oneric.stub> committed rPUBEbcc528b2e2c5: Never automatically assign privileged content types.

Oneric <oneric@oneric.stub> committed rPUBEfef773ca3524: Drop media base_url default and recommend different domain.

Oneric <oneric@oneric.stub> committed rPUBEbdefbb8fd992: plug/upload_media: query config only once on init.

Oneric <oneric@oneric.stub> committed rPUBE5d467af6c529: Update notes on security exploit handling.

Oneric <oneric@oneric.stub> committed rPUBE7ef93c0b6db4: Add set_content_type to Plug.StaticNoCT.

Oneric <oneric@oneric.stub> committed rPUBEdbb6091d0199: Import copy of Plug.Static from Plug 1.15.3.

Oneric <oneric@oneric.stub> committed rPUBEf7c979354271: Sanitise Content-Type of uploads.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE889b57df82b9: 2024.02 release.

Weblate <noreply@weblate.org> committed rPUBEcaaf2deb2235: Translated using Weblate (Polish).

Weblate <noreply@weblate.org> committed rPUBE34ffb92db4a8: Update translation files.

Weblate <noreply@weblate.org> committed rPUBEc6dceb1802d7: Translated using Weblate (Polish).

Restricted Repository Identity added a reverting change for rPUBE1d884fd9143d: Correct og:description tag in static-fe: rPUBE37e2a35b865e: Fix Twitter metadata.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE7d61fb09064a: Merge pull request 'Fix static-fe Twitter metadata / URL previews' (#700) from….

Oneric <oneric@oneric.stub> committed rPUBE37e2a35b865e: Fix Twitter metadata.

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBEcdf73e0ac8b1: Merge pull request 'Better document database differences for Pleroma….

Oneric <oneric@oneric.stub> committed rPUBEbff2812a939c: More prominently document db migrations in migrations from Pleroma.

Oneric <oneric@oneric.stub> committed rPUBEc08f49d88ebb: Add tests for static-fe metadata tags.

Oneric <oneric@oneric.stub> committed rPUBE7964272c98fe: Document how to avoid data loss on migration from Pleroma.

rick <rick@n0id.space> committed rPUBEf254e4f53075: doc/cheatsheet: add missing MRF config detail docs (authored by Oneric <oneric@oneric.stub>).

floatingghost <hannah@coffee-and-dreams.uk> committed rPUBE967e6b8ade49: Merge pull request 'Docs: Add description for….

rick <rick@n0id.space> committed rPUBEc25cfe9b7aad: fixed spelling.

rick <rick@n0id.space> committed rPUBE9830d54fa1a2: doc/cheatsheet: sort main MRF list alphabetically (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBE41dd37d796bc: doc/cheatsheet: add missing MRFs (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBE1ec6e193e693: doc: clarify RejectNewlyCreated uses local account discovery (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBE1640d19448ea: doc/cheatsheet: move :activitypub section ahead (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBE8f1776a8a793: Purge leftovers from FollowBot MRF (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBEda4190c46ee0: doc/cheatsheet: split out always active MRFs (authored by Oneric <oneric@oneric.stub>).

YokaiRick <yokairick@noreply.akkoma> committed rPUBE37f9626116f5: Merge pull request 'Docs: reword description for….

rick <rick@n0id.space> committed rPUBE7a2d68c3ab79: doc/cheatsheet: add link to ActivityExpiration config details (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBE8e7a89605d56: doc/cheatsheet: move MRF policies key to end of section (authored by Oneric <oneric@oneric.stub>).

rick <rick@n0id.space> committed rPUBEdb49daa4a5e6: make it clearer what it affects.

FloatingGhost <hannah@coffee-and-dreams.uk> committed rPUBE3111181d3c0c: mix format.