GNUsocial
/
gnu-social
4
0
Fork 1
Code Issues Releases Wiki Activity
upstream V3 development https://www.gnusocial.rocks/v3
20,823 Commits 8 Branches 4 Tags 309 MiB
PHP 77.9%
Gettext Catalog 8.6%
HTML 6.6%
JSONLD 4%
CSS 1.6%
Other 1.2%
Go to file
Hugo Sales aef1fac536
[SECURITY] Refactor security hardening code and disable unused stream wrappers 
Ensure unwanted enviorment variables are removed from the actual
global environment rather than just the `$_ENV` superglobal variable

Disable stream wrappers, as this is an unexpected feature for most
developers and can be exploited. For instance, `phar://` can be used
to override any class and thus provide code execution (through
`__wakeup` or `__costruct`, for instance). Not a complete solution, as
`php://` can also be abused, but we can't disable it as it gets used
_somewhere_ in our dependencies
 		2022-04-03 18:02:54 +01:00
DOCUMENTATION [UI][CONTROLLER][ENTITY][DOCS] Refactor term 'timeline' into 'feed' 2021-11-26 13:05:23 +00:00
bin [TOOLS][PLUGINS][OAuth2] Add mechanism to allow plugins to have an install script. Add script for generating keys for OAuth 2022-02-28 15:47:32 +00:00
components [ENTITY][Actor][COMPONENT][Tag] Add `Actor->getNoteTags(?string $note_type)` which gets a cached list of NoteTags for notes of type $note_type for the actor 2022-04-01 00:11:01 +01:00
config [CORE][Router] Rename \App\Core\Router\Router to \App\Core\Router and merge \App\Core\Router\RouteLoader with \App\Core\Router 2022-03-28 20:59:15 +01:00
docker [TESTS] Load languages prior to remaining fixtures 2022-03-19 22:18:00 +00:00
docs [CSS] .section-widget class and derivatives replaced as .frame-section, since a widget implies a simple element with a specific function 2022-01-21 22:05:33 +00:00
extlib [TOOLS][COMPONENTS][CORE] Ran cs-fixer on all files 2022-01-30 16:41:54 +00:00
plugins [PLUGIN][Pinboard] For tag list request, respond with the most common variant and the corresponding count for each canon tag 2022-04-01 02:10:12 +01:00
public [SECURITY] Refactor security hardening code and disable unused stream wrappers 2022-04-03 18:02:54 +01:00
scripts [TOOLS][CS-FIXER] Run new PHP CS Fixer config. Notably, adds strict_types 2021-10-27 04:19:28 +01:00
src [SECURITY] Refactor security hardening code and disable unused stream wrappers 2022-04-03 18:02:54 +01:00
templates [COMPONENT][Person][TEMPLATES] Move persosn settings template from core to the component 2022-03-31 03:29:31 +01:00
tests [CORE][Entity] Rename createOrUpdate to 'checkExistingAndCreateOrUpdate', remove update feature from 'create' and add 'createOrUpdate' and fix users 2022-03-28 20:59:15 +01:00
translations [I18N] Remove incomplete autogenerated translation file, to be fixed later 2021-09-14 13:05:42 +01:00
.dir-locals.el [TOOLS][PHPStan] Make a standalone phpstan executable, which executes inside the docker container 2021-10-27 04:19:31 +01:00
.env [QUEUE] Add queueing wrapper, default configuration and example usage 2021-09-14 13:05:33 +01:00
.env.test [TOOLS][TESTS] Ensure database schema is up to date in tests 2022-03-13 14:22:18 +00:00
.gitignore [TOOLS] Update PHP CS fixer and adjust configuration 2021-10-27 04:19:27 +01:00
.php-cs-fixer.php [TOOLS][CS-FIXER] Fix incorrect transformation 2021-10-27 04:19:28 +01:00
CREDITS.md [DOCUMENTATION] Document All The Things! 2021-09-14 13:04:33 +01:00
INSTALL.md [DOCUMENTATION] Add documentation on installing with Docker 2021-09-14 13:10:21 +01:00
Makefile [COMPONENT][Group][Entity] Useless URI column removed 2022-03-09 01:40:34 +00:00
composer.json [TESTS][MODULES] Move Test Fixtures to tests/fixtures folder and add support for loading fixtures from components and plugins 2022-03-13 18:00:21 +00:00
composer.lock [DEPENDENCIES] Update dependencies 2022-03-28 20:59:15 +01:00
docker-compose.yaml.default [DOCKER] Update configuration script to include the worker container 2021-12-20 20:39:54 +00:00
phpstan.neon [TOOLS][PHPStan] Ignore errors due to lack of namespace in CodeCeption acceptance tester 2022-01-21 21:03:06 +00:00
phpunit.xml.dist [TESTS] Add support for loading test suites from plugins and components 2022-03-09 01:37:11 +00:00
social.yaml [PLUGIN][Pinboard] Implement token authentication and settings page, allowing the user to enable, disable, refresh or consult their token 2022-03-31 03:29:31 +01:00
symfony.lock [DEPENDENCIES] Move from Symfony 5.4 to 6 and update all other packages, where applicable 2022-03-09 20:51:42 +00:00