kim 9cd27b412d

[security] harden account update logic (#3198) ...

* on account update, ensure that public key has not changed

* change expected error message

* also support the case of changing account keys when expired (not waiting for handshake)

* tweak account update hardening logic, add tests for updating account with pubkey expired

* add check for whether incoming data was via federator, accepting keys if so

* use freshest window for federated account updates + comment about it

2024-08-13 15:37:09 +00:00

..

ap

[bugfix] relax missing preferred_username, instead using webfingered username (#3189)

2024-08-13 09:01:50 +00:00

api

[bugfix] relax missing preferred_username, instead using webfingered username (#3189)

2024-08-13 09:01:50 +00:00

cache

[feature] Implement following hashtags (#3141)

2024-07-29 19:26:31 +01:00

cleaner

[bugfix] fix emoji recaching operations (#3167)

2024-08-03 19:05:38 +02:00

config

[feature] Add db-postgres-connection-string option (#3178)

2024-08-08 14:00:19 +02:00

db

[feature] Add db-postgres-connection-string option (#3178)

2024-08-08 14:00:19 +02:00

email

[bugfix] add Date and Message-ID headers for email (#3031)

2024-06-22 23:36:30 +02:00

federation

[security] harden account update logic (#3198)

2024-08-13 15:37:09 +00:00

filter

[chore] Add interaction filter to complement existing visibility filter (#3111)

2024-07-24 12:27:42 +01:00

gtscontext

[bugfix] httpclient not signing subsequent redirect requests (#2798)

2024-04-02 13:12:26 +02:00

gtserror

[experiment] add alternative wasm sqlite3 implementation available via build-tag (#2863)

2024-05-27 17:46:15 +02:00

gtsmodel

[feature] Use gifv type for short soundless mp4 videos (#3182)

2024-08-08 08:12:16 +00:00

headerfilter

[feature] request blocking by http headers (#2409)

2023-12-18 14:18:25 +00:00

httpclient

[feature] persist worker queues to db (#3042)

2024-07-30 13:58:31 +02:00

id

[chore] Improve copyright header handling (#1608)

2023-03-12 16:00:57 +01:00

iotools

[performance] update storage backend and make use of seek syscall when available (#2924)

2024-05-22 11:46:24 +02:00

language

[feature] Set/show instance language(s); show post language on frontend (#2362)

2023-11-17 11:35:28 +01:00

log

[chore] Log less output on failed test (#2804)

2024-04-04 16:42:42 +01:00

media

[performance] move thumbnail generation to go code where possible (#3183)

2024-08-08 17:12:13 +00:00

messages

[bugfix] incorrect AP serialize function used serializing worker data (#3196)

2024-08-12 18:23:24 +02:00

metrics

[chore] Update usage of OTEL libraries (#2725)

2024-03-11 15:34:34 +01:00

middleware

[feature] Beef up our AI opt-outs (#3165)

2024-08-02 18:22:39 +02:00

oauth

[chore] Upgrade our Go version to 1.22 (#2862)

2024-04-26 10:40:29 +02:00

oidc

[chore] Improve copyright header handling (#1608)

2023-03-12 16:00:57 +01:00

paging

[bugfix] flaky paging test (#2888)

2024-05-01 13:29:42 +02:00

processing

[security] harden account update logic (#3198)

2024-08-13 15:37:09 +00:00

queue

[performance] update go-structr and go-mutexes with memory usage improvements (#2909)

2024-05-13 08:05:46 +00:00

regexes

[feature] Federate interaction policies + Accepts; enforce policies (#3138)

2024-07-26 12:04:28 +02:00

router

[chore] improved startup / shutdown (#2925)

2024-05-29 13:21:04 +02:00

scheduler

[feature] add support for polls + receiving federated status edits (#2330)

2023-11-08 14:32:17 +00:00

state

[bugfix] Lock when checking/creating notifs to avoid race (#2890)

2024-05-02 13:43:00 +01:00

storage

[feature] Object store custom URL (S3) (#3046)

2024-07-31 13:44:18 +01:00

stream

[feature] Conversations API (#3013)

2024-07-23 20:44:31 +01:00

text

[feature/frontend] Respect prefers-reduced-motion for avatars, headers, and emojis (#3118)

2024-07-21 14:22:08 +02:00

timeline

[feature/frontend] Add player for audio files; use thumbnail for poster (#3099)

2024-07-15 10:47:57 +01:00

tracing

[chore] Update usage of OTEL libraries (#2725)

2024-03-11 15:34:34 +01:00

trans

[feature] Allow users to export data via the settings panel (#3140)

2024-07-31 15:03:34 +01:00

transport

[feature] persist worker queues to db (#3042)

2024-07-30 13:58:31 +02:00

typeutils

[bugfix] relax missing preferred_username, instead using webfingered username (#3189)

2024-08-13 09:01:50 +00:00

uris

[feature] Federate interaction policies + Accepts; enforce policies (#3138)

2024-07-26 12:04:28 +02:00

util

[bugfix] relax missing preferred_username, instead using webfingered username (#3189)

2024-08-13 09:01:50 +00:00

validate

[feature] Implement Filter API v2 (#2936)

2024-05-31 12:55:56 +02:00

web

[feature] Beef up our AI opt-outs (#3165)

2024-08-02 18:22:39 +02:00

workers

[feature] Allow import of following and blocks via CSV (#3150)

2024-08-02 12:41:46 +01:00