itepechi/akkoma
1
0
Fork 0
Code Issues Pull requests Releases Activity
akkoma/lib/pleroma/web
History
Oneric dff532ac72 api: ensure only visible posts are interactable 
It doesn't make sense to like, react, reply, etc to something you cannot
see and is unexpected for the author of the interacted with post and
might make them believe the reacting user actually _can_ see the post.

Wrt to fav, reblog, reaction indexes the missing visibility check was
also leaking some (presumably/hopefully) low-severity data.

Add full-API test for all modes of interactions with private posts.
2025-11-22 00:00:00 +00:00
..
activity_pub Drop broken list addressing feature 2025-11-17 00:00:00 +00:00
admin_api Drop counter_cache stubbing out /api/v1/pleroma/admin/stats 2025-11-17 00:00:00 +00:00
akkoma_api mix/deps: upgrade cachex to 4.x 2025-11-09 00:00:00 +00:00
api_spec api: ensure only visible posts are interactable 2025-11-22 00:00:00 +00:00
auth Support elixir1.15 2023-08-03 17:44:09 +01:00
common_api api: ensure only visible posts are interactable 2025-11-22 00:00:00 +00:00
fallback ensure we send the right files for preferred fe 2023-03-12 23:59:10 +00:00
federator Remove debug prints 2022-06-25 18:43:19 +01:00
feed Merge branch 'develop' into akkoma-hashtag-feeds-restricted 2025-11-13 11:35:16 +00:00
mailer
mastodon_api api: ensure only visible posts are interactable 2025-11-22 00:00:00 +00:00
media_proxy http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
metadata mix/deps: upgrade phoenix family 2025-11-09 00:00:00 +00:00
mongoose_im argon2 password hashing (#406) 2022-12-30 02:46:58 +00:00
nodeinfo api/masto/instance: add short_description field 2025-05-15 20:41:55 +02:00
o_auth mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
o_status Resolve Phoenix 1.8 deprecations 2025-11-09 00:00:00 +00:00
pleroma_api api: ensure only visible posts are interactable 2025-11-22 00:00:00 +00:00
plugs mix/deps: upgrade cachex to 4.x 2025-11-09 00:00:00 +00:00
preload/providers
push Support elixir1.15 2023-08-03 17:44:09 +01:00
rich_media mix/deps: upgrade cachex to 4.x 2025-11-09 00:00:00 +00:00
static_fe mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
templates mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
twitter_api mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
utils
views mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
web_finger giant massive dep upgrade and dialyxir-found error emporium (#371) 2022-12-14 12:38:48 +00:00
api_spec.ex update references to pleroma in docs 2022-12-30 03:43:35 +00:00
common_api.ex api: ensure only visible posts are interactable 2025-11-22 00:00:00 +00:00
controller_helper.ex Use keyed lists for pagination with foreign id 2025-10-09 00:00:00 +00:00
embed_controller.ex Add embed controller tests 2023-07-17 19:18:21 +01:00
endpoint.ex web/endpoint: drop unused function load_from_system_env 2025-08-20 00:00:00 +00:00
federator.ex Protected against counterfeit local docs being posted 2025-02-14 22:10:25 +01:00
gettext.ex mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
gettext_companion.ex mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
instance_document.ex
manifest_controller.ex Expose /manifest.json for PWA 2021-11-24 17:50:55 -06:00
masto_fe_controller.ex Migrate to phoenix 1.7 (#626) 2023-08-15 10:22:18 +00:00
media_proxy.ex mediaproxy: proxy network-path references 2025-04-18 01:50:27 +02:00
metadata.ex mix/deps: upgrade phoenix family 2025-11-09 00:00:00 +00:00
o_auth.ex
pipelines.ex Remove precompiled javascript (#55) 2022-07-08 13:03:18 +00:00
plug.ex
preload.ex mix/deps: upgrade phoenix family 2025-11-09 00:00:00 +00:00
push.ex Support elixir1.15 2023-08-03 17:44:09 +01:00
rel_me.ex http: do not mix and duplicate Tesla opts into adapter opts 2025-09-07 00:00:00 +00:00
router.ex federation/out: add full replies collection to objects 2025-06-07 21:02:31 +02:00
streamer.ex Enforce unauth restrictions for public streaming endpoints 2023-06-14 22:45:19 +00:00
swagger.ex remove anonymous function from plug 2022-07-14 11:17:14 +01:00
telemetry.ex telemetry: expose count of currently pending jobs per queue 2025-10-03 00:00:00 +00:00
translation_helpers.ex mix/deps: upgrade to new gettext API 2025-11-09 00:00:00 +00:00
uploader_controller.ex
web_finger.ex Merge remote-tracking branch 'oneric-sec/media-owner' into develop 2024-05-22 19:36:10 +01:00
xml.ex make xmerl shut up about markup 2024-04-16 10:19:30 +01:00