(`POST /api/v1/apps` could create "Mastodon-Local" app wth any redirect_uris, and if that happened before /web/login is accessed for the first time then Pleroma used this externally created record with arbitrary redirect_uris and client_secret known by creator). |
||
|---|---|---|
| .. | ||
| mix/tasks/pleroma | ||
| pleroma | ||
| jason_types.ex | ||
| transports.ex | ||
| xml_builder.ex | ||