itepechi/akkoma
1
0
Fork 0
Code Issues Pull requests Releases Activity
akkoma/lib/pleroma
History
Oneric 0c9bb0594a Restrict Masto statuses API to Create and Announce activities 
If the id of another activity type was used
it would show the post referenced by the activity
but wrongly attributing it to the activity actor
instead of the actual author.

E.g. ids of like activities can be obtained from
pagiantion info of the favourites endpoint.
For all other activity types the id would need to be guessed
which is considered practically infeasible for Flake UUIDs.

This should’ve been mostly harmless in practice, since:
  - since the activity has the same context as the original post,
    both the original and misattributed duplicate will show up in the
    same thread
  - only posts liked by a user can be misattributed to them,
    presumably making it hard/impossible to associate someone with
    content they disagree with
  - by default only the liking user themself can view their like history
    and therefore obtain IDs for their like activities.
    Notably though, there is a user seting to allow anyone to browse
    ones like history and therefore obtain like IDs. However, since
    akkoma-fe has no support for actually displaying those, there might
    be no actual users of this features.
2025-10-09 00:00:00 +00:00
..
activity queries: drop unused query function 2025-06-07 21:02:31 +02:00
akkoma Add MRFs for direct message manipulation 2023-05-22 23:53:44 +01:00
captcha
collections federation/in: fix inlined featured collections 2025-07-21 17:45:20 +00:00
config Remove proxy_remote vestiges 2024-06-16 01:21:52 +02:00
conversation
docs backend-i18n (#121) 2022-07-27 21:56:59 +00:00
ecto_type
emails Set customize_hostname_check for Swoosh.Adapters.SMTP 2024-12-18 14:37:27 -05:00
emoji http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
helpers http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
http Drop superfluous RequestBuilder 2025-09-07 00:00:00 +00:00
instances http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
mfa
migration_helper purge chat and shout endpoints 2022-07-21 11:29:28 +01:00
migrators Support elixir1.15 2023-08-03 17:44:09 +01:00
object Ensure private keys are not logged 2025-09-07 00:00:00 +00:00
password
search Don't create noop SearchIndexingWorker jobs for passive index 2025-01-07 20:27:27 +01:00
tests Fix compile cycle in Pleroma.Tests.AuthTestController 2021-06-09 13:30:19 -05:00
upload upload/filter/exiftool/strip: hide warnings from log 2025-03-18 01:01:47 +01:00
uploaders Use finch everywhere (#33) 2022-07-04 16:30:38 +00:00
user Re-sign requests when following redirects 2025-09-06 00:00:00 +00:00
web Restrict Masto statuses API to Create and Announce activities 2025-10-09 00:00:00 +00:00
workers Ensure private keys are not logged 2025-09-07 00:00:00 +00:00
activity.ex Use keyed lists for pagination with foreign id 2025-10-09 00:00:00 +00:00
announcement.ex giant massive dep upgrade and dialyxir-found error emporium (#371) 2022-12-14 12:38:48 +00:00
announcement_read_relationship.ex Merge branch 'from/upstream-develop/tusooa/server-announcements' into 'develop' (#85) 2022-07-18 13:08:36 +00:00
application.ex Remove deprecated :warnings_as_errors from startup 2025-08-30 00:00:00 +00:00
application_requirements.ex Rename StripLocation to StripMetadata for temporal-proofing reasons 2024-04-16 20:37:00 +02:00
bookmark.ex
caching.ex
captcha.ex
clippy.ex
config.ex
config_db.ex cosmetic: replace deprecated Tuple.append 2025-05-15 23:40:57 +02:00
constants.ex Don't try to handle non-media objects as media 2024-05-22 20:30:23 +02:00
conversation.ex
counter_cache.ex
data_migration.ex
delivery.ex
ecto_enums.ex v2 Suggestions: dismiss a suggestion 2021-11-26 20:19:29 -06:00
emoji-test.txt emoji-test: update to latest 15.0 draft 2022-09-11 19:55:45 +01:00
emoji.ex emoji: avoid crashing whole server on broken JSON 2025-06-07 21:22:37 +02:00
filter.ex
following_relationship.ex api: order follow requests by date of request 2025-10-09 00:00:00 +00:00
formatter.ex Interpret \n as newline for MFM 2023-02-18 19:56:11 +01:00
frontend.ex http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
hashtag.ex Remerge of hashtag following (#341) 2022-12-05 12:58:48 +00:00
healthcheck.ex
html.ex Fix tests 2024-06-09 18:28:00 +01:00
http.ex Drop superfluous RequestBuilder 2025-09-07 00:00:00 +00:00
instances.ex instances: drop has_request_signatures 2025-06-07 20:27:58 +02:00
iso639.ex Add language support on /api/v1/statuses 2023-01-10 10:29:17 +00:00
job_queue_monitor.ex Use fully qualified function capture for telementry event 2024-02-12 01:59:18 +01:00
jwt.ex
list.ex
logging.ex
maintenance.ex Support elixir1.15 2023-08-03 17:44:09 +01:00
maps.ex
marker.ex
mfa.ex
moderation_log.ex giant massive dep upgrade and dialyxir-found error emporium (#371) 2022-12-14 12:38:48 +00:00
notification.ex Require related object for notifications to filter on content 2023-06-14 19:41:48 +00:00
object.ex federation/out: add full replies collection to objects 2025-06-07 21:02:31 +02:00
object_tombstone.ex
otp_version.ex
pagination.ex Use keyed lists for pagination with foreign id 2025-10-09 00:00:00 +00:00
password.ex update references to pleroma in docs 2022-12-30 03:43:35 +00:00
password_reset_token.ex
prometheus_exporter.ex Use a genserver to periodically fetch metrics 2023-01-01 18:32:14 +00:00
registration.ex
release_tasks.ex giant massive dep upgrade and dialyxir-found error emporium (#371) 2022-12-14 12:38:48 +00:00
repo.ex Remove instrumentors (#98) 2022-07-21 11:32:17 +00:00
report_note.ex
reverse_proxy.ex Sanitise Content-Type of media proxy URLs 2024-03-18 22:33:10 -01:00
safe_zip.ex Add SafeZip module 2025-02-14 22:10:25 +01:00
scheduled_activity.ex Restrict media usage to owners 2024-05-22 20:30:18 +02:00
search.ex Don't try removing deleted users and such from index as posts 2022-06-29 20:49:45 +01:00
signature.ex refactor: move creation of date strings for signatures into plug 2025-09-06 00:00:00 +00:00
stats.ex stats: estimate remote user count 2025-01-07 20:27:28 +01:00
thread_mute.ex
upload.ex Drop activity_type override for uploads 2024-05-22 20:30:23 +02:00
user.ex api: order follow requests by date of request 2025-10-09 00:00:00 +00:00
user_invite_token.ex
user_note.ex Make UserNote comment default to the empty string. 2023-04-27 05:22:12 +00:00
user_relationship.ex fix flaky test_user_relationship_test.exs:81 2022-10-23 13:31:01 +02:00
utils.ex extend custom runtime system (#108) 2022-07-24 16:42:43 +00:00
web.ex Migrate to phoenix 1.7 (#626) 2023-08-15 10:22:18 +00:00
xml_builder.ex