octo
/
microblog.pub
mirror of https://git.sr.ht/~tsileo/microblog.pub
1
0
Fork 0
Code Issues Projects Releases Wiki Activity
522 Commits 7 Branches 12 Tags 3.7 MiB
Commit Graph

112 Commits

Author SHA1 Message Date
Thomas Sileo 89c90fba56 Start to merge IndieWeb and AP interactions 2022-11-17 09:18:06 +01:00
Thomas Sileo 0c5ce67d4e Tweak remote instance redirection 2022-11-13 17:37:19 +01:00
Kevin Wallace 9db7bdf0fb remote follow: use HTML redirect to work around CSP issue 
In Chrome, I get the following when trying to use the remote follow form:

    Refused to send form data to 'https://example.com/remote_follow'
    because it violates the following Content Security Policy directive:
    "form-action 'self'".

It seems some browsers (but notably not Firefox) apply the form-action
policy to the redirect target in addition to the initial form
submission endpoint.  See:

    https://github.com/w3c/webappsec-csp/issues/8

In that thread, this workaround is suggested.
 2022-11-13 17:11:02 +01:00
Thomas Sileo 62c9327500 Add support for setting a custom CSP 2022-11-09 21:26:43 +01:00
Kevin Wallace a4cfd65009 Sign media URLs to avoid becoming an open proxy 
Signatures are valid for ~1 week.
 2022-11-04 19:36:26 +01:00
Kevin Wallace 242bf7b515 fixup! Fix URL generation when not at domain root 
Oops -- missed these two!  Sorry for the noise; let me know if you'd
like me to squash and resubmit.
 2022-11-04 19:22:30 +01:00
Thomas Sileo 32692a7dcd First shot at supporting custom handler 2022-11-02 08:51:21 +01:00
Thomas Sileo 3d049da2e5 Add slug support for Article 2022-10-30 17:50:59 +01:00
Thomas Sileo c8a9793638 Make hashtag case insensitive 2022-10-05 20:27:21 +02:00
Thomas Sileo 6216b316e8 Add remote interaction button 2022-09-23 20:09:05 +02:00
Thomas Sileo 4c86cd4be3 Always show followers/following page when admin 2022-09-13 22:33:20 +02:00
Thomas Sileo b2f268682c New config item to hide followers/following 2022-09-13 21:03:35 +02:00
Thomas Sileo 5f20eab3f1 More work towards support moving/deleting instance 2022-09-01 20:42:20 +02:00
Miguel Jacq c740813b57 Ensure pinned posts appear on front page before others 2022-08-31 08:19:47 +02:00
Miguel Jacq db8f0cb141 Harden the CSP a bit for values that don't inherit default-src. Set Permissions-Policy. Remove TODO 2022-08-30 08:21:11 +02:00
Thomas Sileo ebdba62a06 No more inline CSS 2022-08-29 21:42:54 +02:00
Thomas Sileo a02c8cf0bb Fix NGINX setup instructions 2022-08-29 19:28:54 +02:00
Thomas Sileo ee5265f4dd Small tweaks/typos 2022-08-29 09:09:28 +02:00
Thomas Sileo 87f035d298 HTML error page 2022-08-28 17:36:58 +02:00
Thomas Sileo 4e445a7207 Prevent replay attacks with TLS1.3 0-RTT 2022-08-26 23:35:58 +02:00
Thomas Sileo 40c4a4413d Tweak media proxy error 2022-08-26 22:04:38 +02:00
Thomas Sileo 88cb82c9bb Improve static assets caching 2022-08-26 20:26:41 +02:00
Thomas Sileo edf9e28ed1 Tweak cache size 2022-08-26 18:58:21 +02:00
Thomas Sileo 84203fc66e More webp support 2022-08-26 09:28:00 +02:00
Thomas Sileo 53a31ae562 Webp support 2022-08-26 08:48:14 +02:00
Thomas Sileo 953a6c3b91 Fix empty tag page 2022-08-24 20:52:15 +02:00
Thomas Sileo 601313cf65 Yunohost config utils 2022-08-21 15:40:25 +02:00
Thomas Sileo 6b670c74cf Tweak logger 2022-08-21 09:42:28 +02:00
Thomas Sileo e16dbb4590 Enable CORS for the webfinger endpoint 2022-08-21 09:36:03 +02:00
Thomas Sileo 691ad500c6 Tweak logging 2022-08-20 09:11:48 +02:00
Thomas Sileo d3b7f6ccbb Template fixes 2022-08-18 20:53:51 +02:00
Thomas Sileo 2d28ca3614 Cleanup inbox processing 2022-08-18 20:21:28 +02:00
Thomas Sileo 02c09f2363 Add support for Move activity 2022-08-16 22:15:05 +02:00
Thomas Sileo d1b4bd0181 Improve lookup and handle visibility in threads 2022-08-15 21:34:57 +02:00
Thomas Sileo c711096262 Allow to interact with objects via lookup 2022-08-15 12:49:07 +02:00
Thomas Sileo d381bb3fec Improve actor-level blocking 2022-08-15 10:50:13 +02:00
Thomas Sileo 51bfc4bd30 Various tweaks about AP types 2022-08-13 22:37:44 +02:00
Thomas Sileo 59688ad5f6 Improve show more and show sensitive attachments 2022-08-13 15:20:56 +02:00
Thomas Sileo abfb6355aa Improve DM threads 2022-08-12 10:01:35 +02:00
Thomas Sileo 23afd31bff Improve outgoing worker 2022-08-11 23:10:24 +02:00
Thomas Sileo 9f3956db67 Copy over the content warning when replying 2022-08-01 20:37:08 +02:00
Thomas Sileo cc18e94a81 Fix replies count when replying to an inbox object 2022-07-31 11:46:45 +02:00
Thomas Sileo 7782a39638 Improve admin actor profile 2022-07-31 10:03:45 +02:00
Thomas Sileo 61877b22c0 Tweak media proxy 2022-07-30 09:09:18 +02:00
Thomas Sileo 4b20c26e4b Better Docker support 2022-07-30 08:46:29 +02:00
Thomas Sileo fe9e4eebf4 Fix footer 2022-07-29 23:17:02 +02:00
Thomas Sileo 2ae08d16b8 Tweak custom emoji path 2022-07-29 15:12:48 +02:00
Thomas Sileo c07d17ba9b Add error handling for admin lookups 2022-07-26 18:51:20 +02:00
Thomas Sileo 24f3f94056 Start support for authoring articles 2022-07-25 22:51:53 +02:00
Thomas Sileo d67a44bb59 Add support for voting on Question 2022-07-23 19:02:06 +02:00