2686635f60
Keep the rel="tag" in HTML when purifying
2016-02-07 12:50:26 +01:00
d6664f5735
Hidespam by default
...
...why would something described as "Whether to hide silenced users from timelines"
be set to false by default? :)
2016-02-07 02:33:53 +01:00
098c8b1df4
NoHttpResponseException extends HTTP_Request2_ConnectionException
2016-02-07 01:52:20 +01:00
60804d1902
ES3 compatibility layer not necessary (noone uses IE8 etc.)
...
All browsers with javascript support also support ES5 nowadays. Anyone
using older software should upgrade for other reasons, such as security.
2016-02-04 11:37:24 +01:00
d5ecbd05a1
Forgot a break in a switch when rendering attachments.
2016-02-03 19:32:51 +01:00
9960714896
Disallow zero-length magnet URIs
...
magnet: would match, but now we have a zero-length lookahead which
requires the following character to be a question mark: magnet:?
2016-02-03 15:26:19 +01:00
90045d66ea
HTMLPurifierSchemes plugin to allow geo and magnet URIs
2016-02-03 14:36:51 +01:00
349dba8be0
Only allow our specified URI schemes
2016-02-03 14:31:16 +01:00
e903bd0bc3
Hacky support for geo URI detection
...
Won't work with common_purify yet because there is no geo uri scheme for it
2016-02-03 14:19:08 +01:00
b1ed1f48ea
Configurable linkify for bare IPv4/IPv6
2016-02-03 12:55:00 +01:00
84930f89f9
Don't allow account backups by default.
2016-02-03 01:08:36 +01:00
19b743a9f5
Set time limit to increase time backupaccount can take
...
Wills till run out of memory probably, we should fix that.
2016-02-03 01:04:14 +01:00
9fcfb7cb1d
Proper error message on too much POST data
2016-02-03 01:03:58 +01:00
a2b914ce60
Get URL schemes by URL type
2016-02-03 00:18:37 +01:00
43abfe659b
Bump beta number to 4
...
We have better webfinger @mention@capability.example at least and
OpportunisticQM is somewhat refined.
2016-01-30 00:04:18 +01:00
367fc054dc
Merge branch 'master' into mmn_fixes
2016-01-30 00:03:25 +01:00
36f099958c
Don't match @nickname on @nickname@server.com
2016-01-29 15:53:58 +01:00
cb40f72c7e
Use the profile URI when linking instead of URL
...
since we'll then get to /user/$id instead of /$nickname which is
good for future archives if someone changes their nickname...
2016-01-29 15:21:01 +01:00
6b31feb70f
Strict Standards: Declaration of MysqlSchema::get()
...
should be compatible with Schema::get($conn = NULL)
2016-01-28 20:18:06 +01:00
7e6783bb8f
Replace htmLawed with HTMLPurifier
2016-01-28 19:01:13 +01:00
34093388a7
Merge branch 'nightly' of git.gnu.io:gnu/gnu-social into mmn_fixes
2016-01-27 22:43:37 +01:00
52778e1882
Merge branch 'json_encode_fail_branch' into 'nightly'
...
output error if json_encode fails
See merge request !86
2016-01-26 21:16:24 +00:00
42545c6625
Merge branch 'mention_branch' into 'nightly'
...
correct mentions if parent mentions multiple users with same nickname (don't use first one for all)
See merge request !82
2016-01-26 21:15:25 +00:00
a48055a3cc
Merge branch 'nightly' of git.gnu.io:gnu/gnu-social into mmn_fixes
2016-01-25 20:22:16 +01:00
e447964639
remove my ugly debug info
2016-01-25 19:10:35 +00:00
b1b6a0a69c
config['follow_redirects'] is the extlib's config! if max_redirs is set we want to do our own redirection following in this function
2016-01-25 19:03:26 +00:00
b15434375c
Show plain text files on attachment page.
2016-01-25 16:54:40 +01:00
a9d18a077e
Harmonize, clarify, categorize URL schemes
...
Regular expression + avoid-redirection list now match each other.
2016-01-24 12:47:31 +01:00
1cec627d72
Allow bitcoin scheme to URLs
2016-01-24 12:44:28 +01:00
4e50717e12
output error if json_encode fails
2016-01-23 15:01:27 +00:00
89dd44bf3e
default connect_timeout to 5 instead of extlib 10
2016-01-22 12:20:03 +01:00
3f9c1c142a
Removing unnecessary debug messages etc.
2016-01-21 02:49:34 +01:00
45446f17ad
Only set selectVerbs if it's not set in class var
2016-01-21 02:37:38 +01:00
d3a4a2225f
We want the profile stream to be as raw as possible!
2016-01-21 02:33:43 +01:00
f74d2d555c
Working on some RSVP code stuff
2016-01-21 02:10:34 +01:00
5999171c11
Throw NoObjectTypeException on Notice->getObjectType if no string
2016-01-20 21:37:14 +01:00
21cc737f5c
Cancelling RSVPs now seems to work.
2016-01-20 16:10:10 +01:00
de047f9727
correct mentions if parent mention multiple users with same nickname (don't use first one for all)
2016-01-19 13:41:25 +00:00
15d12b209d
Don't include delete verbs in profile notice stream.
2016-01-18 22:04:42 +01:00
f768de4b46
default connect_timeout to 5 instead of extlib 10
2016-01-18 22:01:45 +01:00
cae344b67b
Events are now saved but not displayed properly again
2016-01-18 20:57:44 +01:00
bdc38a7204
Initial user doesn't need as strict checking on email
2016-01-17 00:39:49 +01:00
deda83fdef
Distinguish notice saving errors from others for Salmon
2016-01-16 22:39:04 +01:00
4678546d33
We want exceptions to be noticable in activityhandlerplugin
2016-01-16 21:19:34 +01:00
3019f8f23f
dbqueuemanager logic
2016-01-16 21:05:34 +01:00
f53ebdeadb
Start handling salmon entries directly with Notice::saveActivity
...
More to come...
2016-01-16 17:25:29 +01:00
1f76c1e4a9
Initial user doesn't need as strict checking on email
2016-01-16 17:23:50 +01:00
44c10bb2aa
Merge branch 'oembed_branch' into 'nightly'
...
purify oembed html and don't allow cdata
hopefully we never need stuff in cdata
reason for this is that this link serves javascript in its oembed data: https://www.maketecheasier.com/switch-windows-10-to-linux/
see:
https://www.maketecheasier.com/wp-json/oembed/1.0/embed?url=https%3A%2F%2Fwww.maketecheasier.com%2Fswitch-windows-10-to-linux%2F
i don't feel we want that in our database.
See merge request !79
2016-01-15 13:11:35 +00:00
16088d9439
ErrorAction and InfoAction fixes, are now ManagedAction
2016-01-14 21:28:47 +01:00
bc0a903bd4
ErrorAction to autodiscoverable file.
2016-01-14 21:21:34 +01:00
b530d385bc
Exception object was not supplied there
2016-01-14 18:51:46 +01:00
0caf0612d0
Make Twitter Media upload API v1.1 reach us
...
Now we just have to accept the 'media' or 'media_data' (base64 encoded)
POST arguments instead of $_FILES uploads.
2016-01-14 18:29:21 +01:00
6e49281adb
Use the Action class itself as error handler
2016-01-14 18:21:11 +01:00
c173c4faa5
Actually throw NoQueueHandlerException too.
2016-01-14 13:48:33 +01:00
df00a88cb4
Forgot to add NoRouteMapException to 6834f355f2
2016-01-14 13:07:00 +01:00
6834f355f2
Making ClientExceptions turn into ClientErrorAction
...
Got some 404s which were presented as 500
2016-01-14 02:47:28 +01:00
99261e0781
Don't LOG_ERR missing paths (misspelling clients aren't errors)
2016-01-14 02:22:47 +01:00
331abf173b
Forgot semicolon
2016-01-14 02:05:33 +01:00
f699ffeb8a
Exception handling in queue handler logic
2016-01-14 02:04:15 +01:00
0ddaa6ff75
Handle exceptions in QueueHandler classes
2016-01-14 01:47:13 +01:00
29b45bb87a
Unnecessary call to User::getKV
2016-01-13 20:08:17 +01:00
818aaa0578
We didn't get profiles from the new-style attention system
2016-01-13 18:35:25 +01:00
3e7e3de554
don't allow cdata elements in purified html
2016-01-13 16:01:27 +00:00
99da1ebe41
Catch NoHttpResponseException when using HTTPClient
2016-01-13 14:17:49 +01:00
3ed632decf
NoHttpResponseException needed instead of HTTP_Request2_Exception
...
HTTP_Request2_Exception assumed an HTTP response status code/line
2016-01-13 14:08:48 +01:00
e75472f460
Use the upstream function to get effectiveUrl
2016-01-13 14:00:05 +01:00
eceafb84de
lib/language.php: rewrited jp as ja.
2016-01-13 13:23:06 +01:00
e49e113140
Ugly hack to show thumbnails of otherwise unrepresentable attachments
...
such as text/html, where the thumbnail has been retrieved via oEmbed/OpenGraph
2016-01-12 15:38:59 +01:00
8c28e54ccc
same as previous, but for mime_to_ext
2016-01-12 13:14:17 +01:00
dbe5d72e4c
If all file extensions are supported we have no list of comparisons
2016-01-12 13:08:54 +01:00
a1b509bb0b
forgot we need access to $html too
2016-01-11 20:58:34 +00:00
8d331b0f35
EndCommonPurify event
2016-01-11 20:54:19 +00:00
1a46d86ca6
lib/util.php quick function to do var_export($var,true)
...
Immensely useful when debugging and we want to put quotes around strings,
potentially stopping any "evil logging attacks" (where input data masks
as logging data).
2016-01-11 19:52:54 +01:00
c1f22f106b
Might as well put a $limit on preg_replace here
...
Since there will (should) never be more than one ^http in that string anyway.
2016-01-11 18:27:26 +01:00
5b2b969a77
Tag notice streams should only show post verbs
2016-01-11 15:15:23 +01:00
b13f8df79b
HTTPClient would return null instead of exception
...
This caused $response->isOK() tests to call a function on a non-existing object, causing all hell to break loose.
2016-01-11 02:36:59 +01:00
5ef10a14ef
Get group attentions too for outbound notices
2016-01-09 15:06:44 +01:00
55aa68b941
CancelGroupForm gets same typing as Join and Leave
2016-01-09 14:13:19 +01:00
fbec7c4e75
Issue #121 - use correct Group ID and strict User_group typing
2016-01-09 14:06:50 +01:00
d13483ca20
Wups, $poster could be undefined
2016-01-09 13:15:09 +01:00
33194b3cff
Attention goes to the parent notice author too
2016-01-08 02:58:31 +01:00
0463d96392
Add more info in logging call
...
There shouldn't be *HandleSalmonTarget, only verification of actor and
then Notice::saveActivity()!
2016-01-08 01:52:10 +01:00
e6f2676c5c
Default to not include delete verbs in notice streams
2016-01-07 23:33:47 +01:00
801ca3531b
common_find_attentions to populate activities from content text
2016-01-07 23:23:37 +01:00
1f02dc639e
shortenLinks _after_ media upload to be consistent with api
2016-01-07 18:14:45 +01:00
be58fd64f5
Use index for File url (urlhash)
2016-01-07 18:13:10 +01:00
d4be5349b3
think I have managed to show oEmbed images better now
2016-01-07 17:35:37 +01:00
5d4b1d0b88
Appropriate exception message in GroupNoProfileException
2016-01-07 12:14:48 +01:00
47c7e1b875
Breaking class definitions out into separate files and fixing typing
2016-01-06 19:46:56 +01:00
f1c4c64cd9
Don't update stored URLs just because we have a filename
...
This would overwrite remote URLs with local verisons which removes source href...
The reason one might have filenames for remote URLs is that StoreRemoteMedia plugin
fetches them and uses the filename field.
2016-01-06 19:24:03 +01:00
b596391fcd
Avoid having to check for notices without rendered copies in upgrade.php
...
Always call the Notice->getRendered() function to get a rendered copy.
We could perhaps put some sanitation there too in the future
2016-01-06 15:32:27 +01:00
4a8e936e19
Somewhat more meaningful error message
2016-01-06 14:10:37 +01:00
4b22b0c42a
More listitems and lists into separate files + stronger typing
2016-01-06 01:36:46 +01:00
6d9f390ba8
Separating classes into files and stronger typing
2016-01-06 01:30:12 +01:00
da2f179ae9
Typing to Profile
2016-01-06 01:25:00 +01:00
e577e883f4
Subscriber lists to separate files and also Profile typing
2016-01-06 00:57:31 +01:00
1946197a1c
Merge request #10 by aroque but in a slightly different version
2016-01-06 00:48:03 +01:00
31c8416a8f
Merge branch 'nightly' of git.gnu.io:gnu/gnu-social into mmn_fixes
2016-01-06 00:24:41 +01:00
792b62874e
Require Profile for Profile->getLists
2016-01-06 00:18:10 +01:00
0b4b0de412
longurl in href
2016-01-05 23:14:51 +00:00
Mikael Nordfeldth
hannes
Akio Nishimura