87423a0191
[ActivityPub] Ensuring Notice Favor/Disfavor
...
ActivityPubPlugin:
- Minor re-write of favor/disfavor event handlers
Activitypub_postman:
like/undo-like:
- fix proper getUrl() call
misc:
- make all activities accumulate errors (may be needed later) and log some information about it
2021-07-16 19:44:33 +01:00
233bdf57ac
[ActivityPub] Ensuring notice distribution
...
ActivityPubPlugin:
- Fix of accepted activity verbs to include SHARES
- Add attention profiles to delivery when announcing
Activitypub_notice:
- New local function to retrieve original URL
- Removal of unnecessary 'Atom*' attributes
- Small fix to the ensuring of actor profile
Activitypub_profile:
- New local function to fetch AP profiles from a collection
Activitypub_postman:
- Fix url passed in the announce activity
2021-07-16 19:44:33 +01:00
25390bf96f
[ActivityPub] Caching of Following/Followers interactions and collections
...
Follow interaction:
- Fixed mini-bug where the subscriber profile was being used as the subscribed
- Updated cache subscription-related values in both instances
- Tested and working with local GS instances
Unfollow interaction:
- Updated cache subscription-related values in both instances
- Tested and working with local GS instances
Followers/Following collections:
- Now returning ActivityPub profiles only
- Stored collections in cache
Misc:
- Fix bug concerning the retrieval of public/private-key after in-function generation
2021-07-16 19:44:33 +01:00
90cb222af5
[ActivityPub] Routes
...
ActivityPubPlugin:
- Update routes to properly use URLMapper
- Minor updates
2021-07-16 19:44:33 +01:00
2f1ddd8280
[CORE] Add ActivityPub plugin
...
This is not the same as the one in https://notabug.org/diogo/gnu-social-activitypub-plugin
Differences to the first "release"
-> Doesn't use guzzle nor has any composer dependencies
-> Supports HTTP Signatures
-> Has basic l10n/i18n
-> Some minor bug fixes
2021-07-16 19:44:33 +01:00
6bf888b520
[PLUGINS] Dropped Memcache in favor of Memcached. The difference between these is that they use a similarly php library to interact with memcache, but memcached is more modern
2021-07-16 19:44:33 +01:00
be1654237d
[Memcached] Merged useful features from Memcache
2021-07-16 19:44:33 +01:00
ac97efbf21
[PLUGINS] Updated and reviewed the Memcached plugin
2021-07-16 19:44:33 +01:00
f689df3e68
[RedisCache] Added README with configuration instructions
2021-07-16 19:44:33 +01:00
df468f9605
[RedisCache] Fix use of undefined variable
2021-07-16 19:44:33 +01:00
d7c2c98a02
[PLUGINS] Removed direct call of EndCache events on all plugins, as it is now handled by the library
2021-07-16 19:44:33 +01:00
d8d7abee9f
[CACHING] Imported Chimo's RedisCache plugin and fixed some small parts
2021-07-16 19:44:33 +01:00
19d68c9f8e
[COMPOSER] Added predis/predis and updated packages
2021-07-16 19:44:33 +01:00
0bb35d7e7f
[LinkPreview] Fix 'no candidate for action "embedproxy"'
2019-08-14 15:32:34 +01:00
e4bdb21a54
[NodeInfo] New endpoint and formula for computing active users
...
Seriously improved documentation
Now NodeInfo 2.0 is available at /api/nodeinfo/2.0.json
For active users we now also consider favourites and recently created accounts
Some further minor bug fixes and full review of the implementation
2019-08-12 05:35:27 +01:00
0030fe3aeb
[REFACTOR] Added explicit return type to all instances of QueueHandler::handle
2019-08-11 01:11:41 +01:00
aaabf82eff
[CORE][QUEUE] Error checking and type declaration on handling notice queue events
...
Patch submitted by XRevan86
2019-08-08 02:44:14 +01:00
52310a8ad8
[Embed] Fixed error related to oembed action
2019-08-07 23:57:40 +01:00
dbde8383c9
[Embed] Fixed use of undefined variable in fixup_files script
2019-08-03 17:49:36 +01:00
6d552f15b6
[Embed] Resize thumbnails fetched by Embed to avoid keeping original images when we need only 128x128. Size configurable in config.php
2019-08-03 17:49:36 +01:00
ba15724a62
[FORMAT][Embed] Ran php-cs-fixer on Embed's files and small style fixes
2019-08-03 17:49:33 +01:00
5be705ca2a
[Embed] Updated fixup_files.php script to be able to fix broken oEmbedinfo using the --broken-oembed flag
2019-08-03 17:49:10 +01:00
07b4cfaeae
[Embed] Hide error from the UI and just don't display an image if the remote image is not valid
2019-08-03 17:49:10 +01:00
c9379b3608
[Embed] Fix bug where we we're losing track of a file, in case the image needed to be reencoded
2019-08-03 17:49:10 +01:00
22c8c96249
[Embed] Fixed Embed tests
2019-08-03 17:49:10 +01:00
d66828c2bf
[Embed] Fixed bug where sometimes images were written outside the site root
2019-08-03 17:49:09 +01:00
a244f3ba4d
[Embed] Removed old oEmbed and OpenGraph implementation
2019-08-03 17:49:09 +01:00
0c20d35206
[Embed] Refactoring and bug fixing
2019-08-03 17:49:09 +01:00
462ea26303
[Embed] Using oscarotero/Embed as first attempt to get oEmbed/OpenGraph data, fallback
...
to previous implementation otherwise.
2019-08-03 17:49:09 +01:00
b25632ebc4
[PLUGINS] Fixed oEmbed dependents to use Embed
2019-08-03 17:49:06 +01:00
2a2b3f72fb
[Embed][DB] Renaming the 'file_oembed' table to 'file_embed' on upgrade
2019-08-03 17:48:28 +01:00
52819d39d9
[OEmbed][Embed] Renamed OEmbed plugin to Embed
2019-08-03 17:48:26 +01:00
39845444cc
[DOCUMENTATION] Update description of extlib and vendor directories
2019-08-03 17:47:27 +01:00
9c0354bbf1
[CORE] Remove function_exists() calls and add up default bcrypt cost to 12.
2019-08-03 17:47:26 +01:00
c09f1c2443
[CORE] Add Argon2I support
...
Add Argon2I support, disabled by default.
2019-08-03 17:47:25 +01:00
912f2c3567
[CORE] Update AuthCryptPlugin
...
Added password_hash() (bcrypt) support with fallback to crypt() for older PHP versions.
2019-08-03 17:47:25 +01:00
ad51998d67
[CORE] Add timing safe backwards compatible password_verify
2019-08-03 17:47:25 +01:00
1049080df5
[CORE] Move public resources to a /public directory
...
Advantages:
* Increases security by preventing direct access to file/
* We are careful and have a defined('GNUSOCIAL') || die() to prevent
direct access to GS files, but we may miss one or a vendor/extlib may
not be as careful
* Improves directory structure - It's more natural to physically
separate what is public from what are GNU social resources
2019-08-03 17:47:25 +01:00
a1edc2c6a9
[CORE][COMPOSER] Move plugins extlibs to composer (where appropriate)
2019-08-03 17:47:24 +01:00
2a06261f75
[CORE][COMPOSER] Move extlib packages with immediate composer correspondent to composer dependencies
...
This adds a composer.json for all dependencies that are available
2019-08-03 17:47:24 +01:00
0b58465fb9
[CORE] Fix notice delete-form
...
DeletenoticeAction:
- Added tombstone check before deletion
NoticeListItem:
- Added tombstone check before showing delete-form
ActivityVerb:
- The plugin was overwriting the deletenotice route. Added stronger
regexp to the connected routes.
2019-08-03 17:47:23 +01:00
ed7a88ce66
[StoreRemoteMedia] Added documentation for feature which limits the maximum filesize which is kept locally
2019-08-03 17:47:22 +01:00
5c0a3102ff
[ROUTES] Allow accept-header specification during router creation
...
Router:
- Fix calls to connect, most of them were misusing the function's params
URLMapper:
- Minor fixes
- Documentation
- Add support for accept-header specification
Plugins/*:
- Fix calls to connect
2019-08-03 17:47:16 +01:00
7070a14480
[CORE][StoreRemoteMedia] Fixed bug where sometimes images were written outside the site root
2019-08-03 17:31:43 +01:00
f746866b65
[StoreRemoteMedia] StoreRemoteMedia now uses the new filename format, which allows it to display correctly in the UI. Formatting fixes
2019-08-03 17:31:42 +01:00
8f31a1a820
[MEDIA][OEMBED] Fixed regression in OEmbed, because it relied on accessing the files directly, which previous commits broke. The File table really should have a bool...
2019-08-03 17:31:42 +01:00
da82048d77
[MEDIA] Fix trying to display file wich is not available locally
2019-08-03 17:31:41 +01:00
f717081893
[OEmbed] Revert filename change introduced with 96ce758c
2019-08-03 17:30:52 +01:00
01b5118c6f
[Oembed] Refactoring and some improvements (namely documentation)
...
Imported some changes from postActiv
2019-08-03 17:30:52 +01:00
d1fc7c0774
[CORE] MySQL 5.5 support fully restored
2019-07-25 15:35:24 +01:00
6c8d2e159e
[DOCUMENTATION] Plugin events should be declared in the plugin's directory not in the core
2019-07-15 03:25:16 +01:00
db9bb6b5a1
[OStatus] null being returned instead of an empty array
...
Fixes: "Invalid argument supplied for foreach" in onEndFindMentions
2019-07-10 00:34:46 +01:00
44653d339d
[Poll] Refactoring and minor bug fixes
2019-06-23 23:06:04 +01:00
f2705180e0
[TagSub] Fix User's tags list issue
...
Issue introduced with 6d9f390b9a92b58057
2019-06-18 14:56:55 +01:00
3f8593268e
[Nodeinfo][TRANSLATION] Fix languages meta-data
2019-06-12 03:25:02 +01:00
8ea83aac48
[OStatus] Wrong exception was being caught
2019-06-12 02:20:58 +01:00
c93547b080
[OpenID] Added support for GS's Internal Session Handler
2019-06-10 16:49:48 +01:00
54f75683c7
[OpenID] s/sync/synch
...
This commit also fixes the translation in /plugins/OpenID/actions/finishopenidlogin.php#L203-L204 (s/Syncronize/Synchronize)
Sync is a bad technical jargon and we should use Synch instead.
Synch is already used in other parts of GNU social as seen in plugins/TwitterBridge/classes/Twitter_synch_status.php
2019-06-10 15:51:56 +01:00
1e4063254b
[OpenID] Added synchronization button and corresponding action
...
UI:
- "Delete" area is now "Actions" area
- Updated themes to better reflect the changes
Routes:
- index.php?action=finishsyncopenid => finishsyncopenid
Translations:
- Updated OpenID translation files
- Updated OpenID POT file
Versioning:
- Bump OpenID minor version
- Bump GS patch version
Why would have labeling the Synchronize button of Sync been of bad taste? - answered by XRevan86:
In "synchronise" "ch" is a digraph meaning /k/ (actually /x/ turned into /k/ in English but whatever).
So… not separate letters.
It's like "ph" in "alphabet", or "sh" in "sheep", or "ch" in "chop" -- "ch" can mean a whole variety of sounds.
2019-06-09 17:04:26 +01:00
69a1d77480
[OpenID] Add sync confirmation in both OpenID settings and login connection
2019-06-09 17:00:06 +01:00
c7afe2f86c
[TRANSLATION] Update Plugin POs
2019-06-09 16:10:03 +01:00
5f4e3fe0eb
[TRANSLATION] Update POTs and normalize files
2019-06-08 18:41:10 +01:00
fb95af1cf5
Added Spanish, Polish and Esperanto translations to NodeInfo plugin
2019-06-08 18:36:04 +01:00
02c67fd114
[Nodeinfo][DATABASE][Usage_stats] Fix wrong type for modified column
2019-06-07 15:02:10 +01:00
b6be1a3659
[DATABASE][User_openid_prefs] Fix wrong type for modified column
...
Patch submited by Sorokin Alexei (XRevan86)
2019-06-07 15:02:09 +01:00
df84ccd916
Nodeinfo has a special rule for upgrades
2019-06-07 15:02:08 +01:00
46f98b3142
[VersionBump] 1.19.0, fairly late
...
The core plugins whose version was attached to GS's were reseted to 2.0.0.
2.0.0 was chosen as reset version for plugins because it is higher than
the one that was set by inheriting GS version. Furthermore, it's a
major change from prior plugin versioning system thus it also makes
semantic sense.
Justification for version bump:
== GS ==
9a4ab31f26 1.19.0
c13b935201c13b93520118fc39d2cfc083a8bcc2e8783d46d0d9a42550ff1536d3ef29c03ed457a6d2e6519badfe411e8138b17e0b4169daa5f87fd4d75b5d2f4af6dbf669836cf674f8f87845a09b34e4d432295d339204f1eea4e679a1187967db6ff5bc030da3209cc7df51d6bf7f17474d8a07edec5f0042971d746b5450b7e65dcc98d1c6e6667db0cd3290227b50a59c439b46496ab8c920986030060b1d529c021af89c052cf838f2eceface473937cb99a39ebe66fddc3cecfc02b43d484ebe8e487187ee0887220b0e186ad57d0e186ad57d0ceae66a30f586fb5a517195296846e
2019-06-07 15:02:08 +01:00
43df2d201c
Extend Action with redirect after login logic, update some actions to use it
2019-06-07 15:02:07 +01:00
691df04103
PSR2-format
2019-06-07 15:02:07 +01:00
2e9fa8f4b7
[DOCUMENTATION] Reorganize documentation
2019-06-05 22:48:28 +01:00
d7adc4e13f
Changing URI to community plugins page
2019-05-26 20:40:36 +02:00
c13b935201
Removing community plugins
2019-05-26 20:34:47 +02:00
ceae66a30f
[Nodeinfo] Fix twitterimport enabled check
2019-05-11 20:52:02 +01:00
1536d3ef29
[XML/HTML Outputter] General improvements and refactoring as well as some bug fixes
2019-05-07 15:57:19 +01:00
688fa4839c
[Nodeinfo] Correct HELP info on fix_stats.php
2019-05-06 23:27:38 +01:00
7845a09b34
RSVP asHTML throws a pretty exception that should go out of the div, by XRevan86
2019-04-26 23:08:16 +01:00
e4d432295d
Only variables should be assigned by reference
...
caught by XRevan86
2019-04-26 23:03:37 +01:00
a4e679a118
Add Registration form hook points by XRevan86
2019-04-26 00:59:38 +01:00
195296846e
Add russian translation to NodeInfo plugin by XRevan86
2019-04-26 00:43:58 +01:00
7967db6ff5
Various obvious bug fixes and better PHP 7 support
...
Many of these came from a XRevan86 patch
2019-04-26 00:34:17 +01:00
c4f962a7d0
Fix wrong path on Realtime cleanupchannels script by XRevan86
2019-04-25 23:12:58 +01:00
bc030da320
Fix undefined variables on Favorite plugin by XRevan86
2019-04-25 23:12:58 +01:00
9cc7df51d6
Some obvious bug fixes for i18n
2019-04-25 23:12:46 +01:00
fc4aa470b2
StoreRemoteMedia - removeRemoteMedia script - Add missing newline in bad limit error
2019-04-23 22:11:29 +01:00
586fb5a517
Faster NodeInfo stats
2019-04-22 20:03:28 +01:00
e186ad57d0
OStatus and XMPP plugins now inform Nodeinfo plugins about their activity
2019-04-22 07:28:45 +01:00
e6667db0cd
Add chimo's Nodeinfo plugin as a default GNU social plugin
2019-04-22 06:50:28 +01:00
e0887220b0
XmppPlugin - Fix preg_match() - Compilation failed
...
Disallowed Unicodecode point (>= 0xd800 && <= 0xdfff)
2019-04-21 17:13:07 +01:00
3290227b50
Modern version of XMPPHP extlib
...
Original XMPPHP is no longer maintained
Therefore I've done some optimizations and imported some commits from birkner and zorn-v forks.
None of the forks really looked ready to be adopted...
2019-04-21 17:13:07 +01:00
7b6c887d76
OStatus plugin - Merge some bug fixes by XRevan86
2019-04-20 23:27:46 +01:00
0df8531834
Fix typo on 986030060b
2019-04-19 21:16:42 +01:00
986030060b
XMPPHP - Fix string as array usage errors on PHP 7
2019-04-19 15:56:51 +01:00
2d20656e22
[StoreRemoteMedia] script removeRemoteMedia.php was trying to remove already removed files
...
Sometimes different posts are associated with the same file, that case wasn't considered
Thanks to XRevan86 for spotting this issue.
2019-04-18 01:03:09 +01:00
98ebe1f63b
[StoreRemoteMedia] script removeRemoteMedia.php was deleting every file posted without being via web interface
...
Added two more options: delete image-only attachments; delete previews (like oembed thumbs)
Some further minor improvements.
Thanks to colegota for spotting this issue.
2019-04-17 02:05:04 +01:00
8c9efff1ac
Merge branch 'issue-326' into 'master'
...
Script for removing remote files until a given date
See merge request diogo/gnu-social!5
2018-09-14 21:33:54 +00:00
2b43d484eb
UserFlag: Pass proper profile to FlaggedProfileListItem
...
Fixes #333
2018-08-16 19:16:15 -04:00
4211206e3b
Script for removing remote files until a given date
2018-08-09 17:26:05 +01:00
ffe14fe5f3
Merge branch 'nightly' into 'nightly'
...
fixed hard coded twitter char limit
See merge request gnu/gnu-social!154
2017-12-17 17:41:14 +00:00
c285f80b18
Merge branch 'cas-user-whitelist' into 'nightly'
...
Added CAS user whitelist feature
See merge request gnu/gnu-social!142
2017-12-17 17:38:21 +00:00
1e1543dd72
Test if $casSettings['user_whitelist'] is an array - and then perform in_array(...) instead of just checking if it's != null.
2017-12-17 17:37:24 +00:00
5af96d3ec7
fixed hard coded twitter char limit
2017-11-08 22:50:00 +01:00
250221ff7f
Merge remote-tracking branch 'upstream/nightly' into nightly
2017-11-08 22:47:23 +01:00
96ce758c05
Trying to debug some stuff regarding oEmbed
2017-09-10 14:04:12 +02:00
10f17efc4f
disabling auto-backlog-importer on subscribe
2017-08-23 18:09:49 +02:00
d61375cb7f
Group autocompletion now fills in hostname part
2017-08-10 12:41:47 +02:00
4c8a8848ed
Groups can now be server-specific with !osm@gnusocial.de vs. !osm@sn.jonkman.ca
2017-08-10 12:30:11 +02:00
8dd06cd8d8
Harmonize webfinger formatting and enable variable pre-mention character
2017-08-10 11:25:04 +02:00
20801a32f7
Logging term used HubSub instead of WebSub.
2017-08-07 00:19:12 +02:00
090f4a9474
Mastodon replies 201 Created for salmon slaps.
2017-08-05 16:21:34 +02:00
0ef483fb4a
preamble with newline for AtomPub output etc.
2017-08-05 10:42:38 +02:00
945920f24d
Mimetype was not recognized if longer than bare mime
2017-08-05 09:50:42 +02:00
457d32e273
Merge branch 'takeshitakenji/gnu-social-twitter-repeat-config' into mmn_fixes
2017-07-11 22:09:12 +02:00
924bcd93e5
Merge branch 'notice_id-xml' into 'nightly'
...
Use the statusnet namespace for notice_id in atom feed
See merge request !136
2017-07-11 20:01:01 +00:00
d564e28f8e
Merge branch 'xmpp-fix-1' into 'nightly'
...
Fix 'from' address in the XMPP ping command
See merge request !141
2017-07-11 19:18:51 +00:00
e4d77cb9b2
Noone uses Facebook anymore.
2017-07-11 12:44:24 +02:00
9919ccb8b5
HubSub now remembers recent failures and counts them
2017-07-10 20:28:45 +02:00
661930cbe6
oEmbed had bad variable reference in error message
2017-07-10 20:28:35 +02:00
c9cfda5ef2
Bad constant (LOG_WARNING, not LOG_WARN)
2017-07-10 14:50:25 +02:00
4ba7c4a021
AuthCrypt README brought out of the stone age
2017-07-10 14:49:01 +02:00
74a60ab963
Rework the push mechanism a bit to a less DB dependant queue
2017-07-10 14:43:28 +02:00
3bc2454e91
Avoid excessive remote requests on oEmbed lookups
...
I noticed that each time a notice was accessed it'd do a remote lookup
with HEAD (and continue despite 404 etc.) and then another attempt to
download the resource. If this wasn't successful new attempts would be
made for each loading of the resource, which is extremely resource
intensive.
Whenever we can say "it's been n seconds since the last attempt" we
could probably enable this again - or just manually reload remote
thumbnails (as part of the StoreRemoteMedia plugin etc.)
2017-07-10 14:41:03 +02:00
3395f6081c
Endless loop nesting on ensureHub failure now fixed
...
Essentially I was missing a negation on a test if we were in rediscovery mode.
2017-06-22 14:37:32 +02:00
fa44e0c06e
set a 'rediscovered' parameter to avoid nesting into an ensureHub loop forever
2017-06-22 00:30:38 +02:00
e8eb9f9614
Less raw database dumps in debug please
2017-05-02 09:18:43 +02:00
e9ab06b59e
Fix issues with non-subscribed Ostatus_profiles
2017-05-02 09:14:30 +02:00
06b25f384a
File_redirection->getFile could never get the file anyway if $redir->file_id was empty...
2017-05-02 09:07:00 +02:00
5af5bb2a32
Show WebSub state on remote user profiles
2017-05-01 21:18:04 +02:00
caa5fb75b3
Introduce neat function getFeedSub() on Ostatus_profile
2017-05-01 21:17:22 +02:00
f4d6710a0f
Change mentions of PuSH to WebSub
...
WebSub is probably finalised before we make a release anyway. Here is
the official spec: https://www.w3.org/TR/websub/
Mostly just comments that have been changed. Some references to PuSH <0.4
are left because they actually refer to PuSH 0.3 and that's not WebSub...
The only actual code change that might affect anything is FeedSub->isPuSH()
but the only official plugin using that call was FeedPoller anyway...
2017-05-01 11:04:27 +02:00
b3da5bdaa3
Debugging log fix.
2017-05-01 10:36:55 +02:00
f6d4d00e02
I think this will stop my daemons from endlessly looping
...
I got this which ate all my memory:
queuedaemon.php:10733] HTTPClient: HTTP HEAD https://drive.google.com/file/d/*masked*/view?usp=sharing - 200 OK
queuedaemon.php:10733] Checking for remote URL metadata for https://drive.google.com/file/d/*masked*/view?usp=sharing
queuedaemon.php:10733] HTTPClient: HTTP GET https://drive.google.com/file/d/*masked*/view?usp=sharing - 200 OK
queuedaemon.php:10733] Trying to discover an oEmbed endpoint using link headers.
queuedaemon.php:10733] Could not find an oEmbed endpoint using link headers, trying OpenGraph from HTML.
queuedaemon.php:10733] HTTPClient: HTTP HEAD https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook - 200 OK
queuedaemon.php:10733] Checking for remote URL metadata for https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook
queuedaemon.php:10733] HTTPClient: HTTP GET https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook - 200 OK
queuedaemon.php:10733] Trying to discover an oEmbed endpoint using link headers.
queuedaemon.php:10733] Could not find an oEmbed endpoint using link headers, trying OpenGraph from HTML.
queuedaemon.php:10733] HTTPClient: HTTP HEAD https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook&usp=embed_facebook - 200 OK
queuedaemon.php:10733] Checking for remote URL metadata for https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook&usp=embed_facebook
queuedaemon.php:10733] HTTPClient: HTTP GET https://drive.google.com/file/d/*masked*/view?usp=sharing&usp=embed_facebook&usp=embed_facebook - 200 OK
queuedaemon.php:10733] Trying to discover an oEmbed endpoint using link headers.
queuedaemon.php:10733] Could not find an oEmbed endpoint using link headers, trying OpenGraph from HTML.
...ad nauseam.
2017-05-01 10:27:21 +02:00
37c97ac8fc
Message to end-user on why FeedSub failed.
2017-05-01 07:40:16 +02:00
16880de8f6
ensureHub on 422 status code (Superfeedr error on non-existing topic)
2017-04-30 10:29:16 +02:00
b20b9727cf
More debugging info for FeedSub PuSH self-healing
2017-04-30 09:46:15 +02:00
e21043e81c
syntax fix (throw _new_ *Exception)
2017-04-30 09:33:06 +02:00
1ecf709918
Make sure we don't receiveFeed() in the case of that exception
2017-04-30 09:31:16 +02:00
5288a6f9e2
Update huburi for FeedSub if PuSH signature is invalid
...
This because some remote server might have used third party PuSH hubs
but switch and we don't know about it.
Possible risks here are of course MITM that could force us to rediscover
PuSH hubs from a feed they control, but that currently feels ... meh.
2017-04-30 09:20:08 +02:00
853b016a42
Separate ensureHub into function in FeedSub
2017-04-27 09:24:12 +02:00
598b51eb7a
Escaping a URI in common_debug call
2017-04-27 09:23:45 +02:00
ea6d8b8bde
LRDD blacklisted URL test
2017-04-26 23:21:13 +02:00
bb76af4f65
Test URLs against blacklist also on PuSH subscriptions.
2017-04-26 22:41:59 +02:00
df7ff4ef1a
Moving form to its own file as we do nowadays
2017-04-25 21:13:29 +02:00
c71600c144
Modernise some function calls etc, to newer GNU social standards
2017-04-25 21:03:43 +02:00
5f24fc0986
Blacklist plugin enabled by default (bug fixes will come)
2017-04-25 20:43:31 +02:00
a53284fe4f
Use getByID nistead of getKV for Feedsub in PushInQueueHandler
2017-04-25 20:42:10 +02:00
956cfaf844
Try https first on URL mention lookup
2017-04-22 12:29:53 +02:00
95f991cff3
Somewhat simpler regex. Thanks acct:takeshitakenji@gs.kawa-kun.com
2017-04-22 12:12:27 +02:00
69e944e21a
Fix URL mention regular expression FOR REALZ
2017-04-22 11:45:24 +02:00
51e5cc2ac8
Fix URL mention regular expression in OStatusPlugin
2017-04-22 11:15:55 +02:00
2fc4b174c1
Domain name regular expression into lib/framework.php
2017-04-22 11:07:38 +02:00
bd6c93a811
Split up OStatusPlugin preg functions so they can be reused
2017-04-22 11:02:41 +02:00
54971842f2
A bit more instructive debugging
2017-04-22 10:55:24 +02:00
0fd83f0028
New domain regexp for WebFinger matching.
2017-04-22 10:51:03 +02:00
e98bceec10
Import backlog on new subscription.
...
Danger is when importing a new feed that may be maliciously crafted
to contain a zillion entries.
2017-04-21 09:31:27 +02:00
f51cb6fca9
Split OStatusPlugin FeedSub receive into two parts
...
FeedSub::receive now only handles the PuSH verification
FeedSub::receiveFeed is protected and only parses+imports feed XML
2017-04-21 08:13:39 +02:00
e87115d462
Less frightening interface on remote subscription
...
Instead of an error message in a red box about being unable to find the
profile, you get the title "Remote subscription" and no error message.
2017-04-19 11:41:34 +02:00
548e59fc99
Empty resource would throw exception
...
The "+ Remote" link on your profile page broke because of exception.
2017-04-19 11:37:43 +02:00
6ca5bb4d41
Added CAS user whitelist feature
...
This feature filters users who may log in via CAS. This is useful when
both CAS and password authentication is enabled and there is a mismatch
between some GNU social account names and CAS user names. This prevents
CAS users from logging in as someone else on GNU social.
2017-04-17 12:41:49 -04:00
35b0a9e3ae
Handle normalized acct: URIs in ostatussub
...
Mastodon sent the proper acct: URI and not just 'user@domain' when
using the remote subscribe functionality.
2017-04-16 11:01:16 +02:00
25b4996145
Fix 'from' address in the XMPP ping command
...
This commit corrects a syntax error that caused the XMPP daemon to
reatedly reconnect to the remote server.
2017-04-13 12:35:49 -04:00
24910f2363
Merge branch 'fix-twitterbridge' into 'nightly'
...
Fix TwitterBridge imported notices not displaying in timeline
See merge request !130
2017-04-06 10:20:41 +00:00
bc1f8b5db6
Merge branch 'master' of git.gnu.io:gnu/gnu-social into nightly
...
strk's OpenID fix
2017-04-06 11:15:37 +02:00
6679ecb9d7
Merge branch 'fix-openid-removal' into 'master'
...
Fix OpenID URI removal
See merge request !138
2017-04-06 09:12:35 +00:00
1ef206467f
Fix OpenID URI removal
...
See #252
2017-03-18 13:33:07 +01:00
85a407e7b0
Normalize OpenID URI before checking it for validity
...
Fixes #251
2017-03-18 10:56:01 +01:00
9fead39f36
Merge branch 'master' of git.gnu.io:gnu/gnu-social
2017-03-18 01:36:35 +01:00
948744538c
StoreRemoteMedia now checks remote filesize before downloading
2017-03-18 01:35:45 +01:00
dc7c64592b
Add var type to newListItem() parameter
...
Fixes some "Declaration of $child::method should be compatible with
$parent::method" warnings.
2017-03-16 22:57:16 -04:00
47cd054976
Use the statusnet namespace for notice_id
2017-02-04 21:59:30 +11:00
8b8e2825e3
Merge branch 'master' of git.gnu.io:gnu/gnu-social into mmn_fixes
2017-01-15 21:25:06 +01:00
f198d5d110
improve status length calculation, each link is exactly 23 characters long at Twitter
2016-12-14 15:54:02 +01:00
6bfc97c95d
Less spammy logs
2016-10-22 23:24:13 +02:00
6ebc5f0bff
some debugging calls and make sure $hints['feedurl'] gets set with $feeduri in case that variable is used.
2016-10-22 23:08:44 +02:00
3e5ae79c5a
Added chimo's plugins
2016-09-02 11:37:53 +02:00
25e4b9a35e
Add Qvitter and QvitterPlus
2016-09-02 11:34:50 +02:00
a1c7c0ab01
Adding SensitiveContent Plugin for nsfw filtering
2016-09-02 11:34:29 +02:00
cb5bcf4937
bad log constant
2016-08-28 00:16:31 +02:00
a32bfe7d87
TagCloud turned into plugin (performance issues on large installs)
2016-08-27 15:24:25 +02:00
27022e7c39
Typing on WebFinger onRouterInitialized handler argument URLMapper $m
2016-08-27 15:00:29 +02:00
1d791f81fa
Attachment styling
2016-08-21 09:31:26 +02:00
1f5e306760
Set object_type to ActivityObject::NOTE on notices imported from Twitter. Previously was unset which caused ActivityHandler to throw an error during onStartOpenNoticeListItemElement() and the notices would not display in the timeline.
2016-08-09 21:02:57 +05:30
563b3b1328
Using File->setTitle in oEmbed
2016-07-23 21:01:28 +02:00
1b3d583418
file_quota for OembedPlugin too
...
Don't download huge files that might kill memory limits.
2016-07-21 03:19:05 +02:00
809e2f6d07
Use File->getID()
2016-07-21 01:38:48 +02:00
d230d332cf
return false to exit event, imgPath holds the path
2016-07-21 00:27:22 +02:00
13e1f0a561
VideoThumbnails shouldn't have to recreate the thumbnail all the time
2016-07-21 00:24:05 +02:00
fc440ba7e7
Easier debugging of VideoThumbnails plugin
2016-07-20 22:51:38 +02:00
1d53e7060a
Changed ShowfavoritesAction to use Action functions for profiles
2016-07-07 11:11:20 +02:00
4a3ed7d0ae
I don't know why we would set the mimetype as title here
2016-07-07 00:43:51 +02:00
3987cad9b7
Use delivered content-type to parse XML_XRD
...
In issue #205 we saw data coming in with an additional line-break before
the JSON data which fuzzed the auto-detection in XML_XRD (which assumed
a { as the first character). If we use the Content-type header from HTTP
we can avoid that issue.
2016-07-02 13:44:25 +02:00
cfd9aee57b
Better logging for issue #205
2016-07-02 13:32:23 +02:00
a833eaa651
Make all hash algorithms available (but whitelist by default)
...
sha1 is whitelisted only because StatusNet requires it.
2016-06-28 11:54:39 +02:00
3166a04cef
actually respond with the error message in text on Salmon calls
2016-06-25 20:50:00 +02:00
bf4acc21be
A bunch of GIFs were >5MiB!
2016-06-25 20:37:00 +02:00
ad7ebd1a8c
Even more phpseclib update related stuff.
2016-06-25 20:34:28 +02:00
d10ce6ac7c
Give Webfinger response to group queries
2016-06-25 20:13:19 +02:00
d0c26fb1a4
URIFIX in Ostatus_profile, handle missing feedsub
2016-06-25 11:59:31 +02:00
7978cd6d59
s/EmptyIdException/EmptyPkeyValueException/
2016-06-25 11:50:59 +02:00
d7a4098b56
Use a separate max download limit for remote files than file_quota too
2016-06-24 16:07:57 +02:00
af23c9f7cd
StoreRemoteMedia now checks remote filesize before downloading
2016-06-24 15:56:14 +02:00
f1e3314bb7
StoreRemoteMedia avoids too large files
2016-06-24 15:47:02 +02:00
c19f87f867
fixes issue #189 with a script lacking exception handling
2016-06-24 15:19:24 +02:00
39e8c13afb
Properly parse incoming bookmarks
2016-06-24 13:51:40 +02:00
a4051945fd
Handle exception from Magic Envelope toXML function
2016-06-23 23:27:18 +02:00
6dcb293ba0
Unnecessarily verbose code
2016-06-23 23:03:58 +02:00
16f4583498
throw ClientException instead of clientError
2016-06-19 03:38:00 +02:00
2726478467
Bump Diaspora plugin version because of phpseclib fix
2016-06-19 03:25:03 +02:00
bac95913e8
phpseclib defaults to OAEP but we want PKCS1 in D*
2016-06-19 03:23:26 +02:00
ed97b88b04
Err, don't need that comment.
2016-06-19 02:27:50 +02:00
76114e2748
Missed some phpseclib stuff in DiasporaPlugin
2016-06-19 02:26:44 +02:00
47aabf4fda
Let's just put the namespaced phpseclib in extlib instead of plugins/OStatus/extlib
2016-06-18 00:00:32 +02:00
5bfd9dbaa7
repost_of -> repeat_of, also trying with isset()
2016-06-17 23:53:05 +02:00
3a8ce99a9d
Magicsig call for phpseclib\Math\BigInteger fixed
2016-06-17 23:47:00 +02:00
1839082f95
OStatus Magicsig adaptations to new phpseclib
...
Some constants have changed and the way to call RSA->sign(...) too.
2016-06-17 23:43:24 +02:00
d8af92bda2
Diaspora phpseclib update
2016-06-17 23:42:50 +02:00
09ef0c1f33
bump Linkback plugin thanks to awesome singpolyma
2016-06-17 23:22:44 +02:00
a1d064129a
Handle namespaces for new phpseclib
2016-06-17 23:21:34 +02:00
28ca5d90d9
phpseclib updated, some new features that we won't use
2016-06-17 22:44:12 +02:00
005b4c8dd1
Merge branch 'strict-warnings' into 'nightly'
...
Fix some strict warnings (Action::prepare, Action::handle)
I know MR with changes to a bunch of files aren't great practice, but I figured since all the changes are one-liners it might not be a huge deal.
Related to #190
See merge request !123
2016-06-17 16:29:47 -04:00
97243c8a91
Allow 201 as well, because spec says so
2016-06-10 21:13:10 +00:00
274e394d8e
Pass all but two webmention.rocks tests
2016-06-10 21:03:16 +00:00
1e9077f529
Set avatar where available
2016-06-10 21:02:50 +00:00
6861d2f3a1
Get avatar out of entry properly
2016-06-10 21:02:34 +00:00
624584f9df
Need to strtotime before we can format the date
2016-06-10 21:02:08 +00:00
4f3a031786
Use strpos check properly
2016-06-10 21:01:53 +00:00
e96d7d48f5
400 code needs ClientException
2016-06-10 21:01:23 +00:00
9de79f0a36
Update prepare() method on Action subclasses.
...
Fixes handle()-related strict warnings such as "Strict Standards:
Declaration of AdminPanelAction::prepare() should be compatible with
Action::prepare(array $args = Array)
Ref. #190
2016-06-01 02:26:44 +00:00
ba2975aac8
Update handle() method on Action subclasses.
...
Fixes handle()-related strict warnings such as "Strict Standards:
Declaration of AdminPanelAction::handle() should be compatible with
Action::handle()"
Ref. #190
2016-06-01 02:26:44 +00:00
60130633f0
Linkback references to unset indexes + spelling error
2016-05-01 11:36:07 +02:00
e4f688fcfd
naughty extlib fix (PHP7)
...
The explode function didn't return empty elements (which split did)
2016-04-26 02:57:14 +02:00
3e9b0d6018
split is gone, use explode. PHP7 extlib fix
2016-04-26 02:41:56 +02:00
af28160679
Naughty fix for extlib XMPPHP (PHP7)
...
I shouldn't fix extlibs, but here goes anyway. I will see if there's
an upstream library we can track which has fixed this themselves.
2016-04-26 02:41:04 +02:00
ce65fe96ad
Oembed bugs with thumbnail generation.
2016-04-18 15:33:20 +02:00
b1de90fe08
Send thr:in-reply-to as well, for clarity...
2016-04-01 23:21:57 +02:00
922b65d231
More debugging in Salmon since we get situations which can't find inReplyToID
2016-04-01 23:10:34 +02:00
299949b156
fix/legacy_http for WebFinger + some minor fixes
...
Now won't match possibly maliciously named remote profile URLs
(where the profile URL could be a notice URL for example, which
would mean the response would be incorrect)
When looking up remote entities, we should _only_ use the stored URI,
but that's for the future to do...
2016-03-30 01:32:11 +02:00
df3bcbb6cb
Possibly replace weirdly capitalized htTPs: too
2016-03-30 01:31:17 +02:00
cb212ba41c
Gah, bad syntax
2016-03-29 12:55:50 +02:00
f8765c6166
Upgrade script for Bookmark uses joins instead of exists (performance++)
2016-03-29 12:48:00 +02:00
dcffe5d992
Forgotten File::getByUrl conversations (performance++)
2016-03-29 12:13:53 +02:00
23bb45b845
Upgrade info from Bookmark plugin
2016-03-29 12:13:23 +02:00
d4041a4a1f
a little bit more explicit logging
2016-03-28 16:41:29 +02:00
16517f019a
Embarrasing copy-paste gone too fast
2016-03-28 16:25:29 +02:00
7bef2ad4cc
Update Profile Data script fixes, might work for groups too now
2016-03-28 16:19:47 +02:00
a93c69d150
OStatus update profile data script fixes
2016-03-28 15:42:41 +02:00
2e327dfcd7
Probably fixes issue with looping XMPP queue items
2016-03-28 11:33:52 +02:00
97f7e6632d
Embed attachments marked up as microformats2 (I think rather properly)
2016-03-27 16:21:43 +02:00
327b8c863e
Initial (not yet working) fetch remote plugin
2016-03-27 15:01:44 +02:00
2d0153195e
Output proper remote info on WebFinger notice resources
2016-03-27 14:56:27 +02:00
7be4641040
Actually return an Ostatus_profile
2016-03-27 14:54:14 +02:00
4d382a59d0
Use HTTPClient instead of Yadis HTTPFetcher in Linkback plugin
2016-03-24 03:01:18 +01:00
be22886be8
Catch some exceptions in Linkback
2016-03-24 02:00:16 +01:00
f522c08438
Stricter typing in Realtime plugin functions
2016-03-24 01:41:58 +01:00
2759c3f0db
Debugging output in OStatus for easier reading+greping
2016-03-23 17:52:02 +01:00
8c6d0759c7
If upgraded from http to https, keep hubsub->topic up to date too (thanks hannes2peer)
2016-03-23 15:37:55 +01:00
0767bf487e
Use the new onUpdateKeys in dataobject for tasks on-update of keys
...
sets the hashkey column of the row to sha1(topic + '|' + callback)
2016-03-23 15:22:34 +01:00
f83b81b8c4
Change config webfinger/http_alias to fix/legacy_http
...
Set $config['fix']['legacy_http'] to perform some actions that are
needed if your site used to be served over http but now has upgraded
to https!
2016-03-23 15:21:02 +01:00
53c1750f0d
If the attachment is a photo, don't replace representation in oEmbed
2016-03-22 14:02:36 +01:00
51840a6693
doActionPost for delete should use deleteAs
2016-03-21 18:07:29 +01:00
55544845db
Just some comment clarification
2016-03-21 17:50:06 +01:00
39ebb64b85
Added proper enabling and disabling of sending RTs to Twitter.
2016-03-21 07:12:52 -07:00
14cb2d5398
Merge branch 'master' into mmn_fixes
2016-03-21 12:27:04 +01:00
afdd6d39ec
Some Google stuff that need to be there (or comments)
...
Note that these won't be shown to the enduser and will never be accessed automatically.
We should put the salmon-protocol stuff on ostatus.org
2016-03-21 12:25:04 +01:00
b4cbf620ab
woops, accidentally deleted updates-from rel on mass Google-deletion
2016-03-21 12:13:01 +01:00
1ebd4f342e
woops, accidentally deleted updates-from rel on mass Google-deletion
2016-03-21 12:12:24 +01:00
241b965715
oEmbed CSS file
2016-03-21 03:12:24 +01:00
980085a8a3
Merge branch 'master' of git.gnu.io:gnu/gnu-social into mmn_fixes
...
Conflicts:
plugins/Minify/extlib/minify/README.txt
plugins/Minify/extlib/minify/UPGRADING.txt
plugins/Minify/extlib/minify/min/README.txt
plugins/Minify/extlib/minify/min/builder/index.php
plugins/Minify/extlib/minify/min/lib/JSMin.php
plugins/Minify/extlib/minify/min/lib/Minify.php
plugins/Minify/extlib/minify/min/lib/Minify/CSS.php
plugins/Minify/extlib/minify/min/lib/Minify/CSS/Compressor.php
plugins/Minify/extlib/minify/min/lib/Minify/Controller/Page.php
plugins/Minify/extlib/minify/min/lib/Minify/Packer.php
plugins/Recaptcha/RecaptchaPlugin.php
2016-03-21 03:10:19 +01:00
50a10cf161
Minify is evil.
2016-03-21 03:02:22 +01:00
b7c4c960e2
Don't use default_port for irc schemes
2016-03-21 02:48:37 +01:00
e64c3a1d87
irc and ircs schemes for HTMLPurifier
2016-03-21 02:46:28 +01:00
11c57e7aee
Remove Google References
...
This removes most references to Google, with some
remaining since they may point to things which are still
relevant. References to Google Code, Google Buzz and
Google Maps have been removed
2016-03-20 13:06:58 +00:00
365f3d2aa5
Full-content oEmbed html doesn't take up all space (and renders properly)
2016-03-17 12:58:40 +01:00
102f7ab059
oEmbed neatifying (inspired by Qvitter)
2016-03-17 00:31:45 +01:00
b2cfbded2e
Upgrading from 1.1.x would make uri fields have length=255
2016-03-15 16:54:10 +01:00
f4833c6c91
More verbose salmon debugging
2016-03-15 16:53:19 +01:00
f32414dd93
Upgrading from 1.1.x would make uri fields have length=255
2016-03-15 16:52:57 +01:00
5ca2a28246
Make oEmbed handle our http/https setting better.
2016-03-10 14:20:21 +01:00
265fa12917
Relatively experimental change to store thumbnails in 'file/thumb/' (by default)
2016-03-07 22:33:34 +01:00
41b64cb8a3
static function declaration
2016-03-07 20:09:15 +01:00
6ec72b2978
Move mail_confirm_address out of mail.php
2016-03-06 17:27:40 +01:00
e9516ea4dd
Allow gopher: scheme in link href
2016-03-06 03:39:34 +01:00
a9bdf761e8
Merge branch 'remote-media-blacklist-mk2' into 'nightly'
...
add server blacklist to StoreRemoteMedia plugin
allows server admins to block local storage of remote media from particular servers while still allowing a default policy of acceptance
See merge request !114
2016-03-03 20:17:23 +00:00
30e70c4697
update readme
2016-03-02 16:05:40 +00:00
43754c7f17
add blacklist to StoreRemoteMedia plugin
2016-03-02 15:41:17 +00:00
a262c16f06
Catch exception on delete of Confirm_address in a plugin
2016-03-02 15:37:47 +01:00
e4e0a39dad
Only OStatus distribute if profile hasRight to PUBLICNOTICE
2016-03-02 12:42:09 +01:00
b4271a3533
Stricted typing + protected on FilteringNoticeStream->filter
2016-03-02 11:40:43 +01:00
9a89990293
Some changes since getFancyName() is longer with full acct: URI
2016-03-02 00:13:28 +01:00
63c087a255
Consistent behaviour for ScopingNoticeStream $scoped
...
We don't guess the current profile anymore if the value of the profile === -1
Also sets $this->scoped for all ScopingNoticeStream inheritors, which just
like in an Action can be null if we're not scoped in any way (logged in).
2016-03-01 14:51:47 +01:00
b9a11f8c21
Merge branch 'fix-author-fallback' into 'nightly'
...
Fix author fallback
Previously if there was no discernable author the nickname "Array"
would end up used. This was a bug, obviously. It is fixed now.
See merge request !111
2016-02-28 18:42:36 +00:00
9dc4f13579
Fix author fallback
...
Previously if there was no discernable author the nickname "Array"
would end up used. This was a bug, obviously. It is fixed now.
2016-02-26 22:06:04 +00:00
12f1707a74
Ostatus_source filled no purpose whatsoever
2016-02-26 22:37:26 +01:00
b4dc060d75
Don't auto-silence other users by IP by default
2016-02-26 16:10:03 +01:00
dc51354316
Merge branch 'readme-plugins' into 'nightly'
...
Readme plugins
* Adds several plugin READMEs
They are pretty basic, but it's a start.
* Changes status.net/wiki URLs to git.gnu.io
The status.net wiki is dead.
See merge request !103
2016-02-26 12:32:42 +00:00
d500fb8598
Merge branch 'remove-openid' into 'nightly'
...
Fix: Cannot remove OpenID
OpenidsettingsAction::removeOpenID() was comparing and int with a string
so always displayed "That OpenID does not belong to you."
See merge request !107
2016-02-26 12:30:01 +00:00
4d17d95335
Try to get mime data before hashing (cpu intensive)
2016-02-25 22:31:45 +01:00
80f7a5f025
$metadata->thumbnail_url is not guaranteed to be set
...
We should probably have a separate class for this, so we can more
easily combine different technologies similar to oEmbed/OpenGraph.
2016-02-25 19:47:16 +01:00
4239c952d2
$metadata->thumbnail_url is not guaranteed to be set
...
We should probably have a separate class for this, so we can more
easily combine different technologies similar to oEmbed/OpenGraph.
2016-02-25 19:46:17 +01:00
99f2aba6e1
Fix: Cannot remove OpenID
...
OpenidsettingsAction::removeOpenID() was comparing and int with a string
so always displayed "That OpenID does not belong to you."
2016-02-24 12:42:41 -05:00
e6f07d8554
Use in_array instead. Now we get third party responses to contextually interesting threads
...
I think this solves much of the "third party conversation" issues, assuming involved parties
are using modern GNU social instances.
2016-02-24 00:19:27 +01:00
brunoccast
Diogo Cordeiro
Miguel Dantas
Daniel Supernault
Miguel Dantas
Guillaume Hayot
Chimo
mmn
vinz
Andrew Engelbrecht
Sandro Santilli
Thomas Karpiniec
Bjoern Schiessle
Nym Coy
Stephen Paul Weber
Neil E. Hodges
Bob Mottram
Saul St John