Commit Graph

26727 Commits

Author SHA1 Message Date
Laura Hausmann
ca331d2406
[backend] Create a new resolver in parseAudience if none is passed to the function
This commit addresses disclosed primitive 23
2024-11-20 23:56:16 +01:00
Laura Hausmann
dc3c2d1ad4
[backend] Enforce blocks in NoteRepository.isVisibleForMe
This commit addresses disclosed primitive 20
2024-11-20 23:56:12 +01:00
Laura Hausmann
aa73a8905d
[backend] Require admin scope for AP get endpoint
This commit addresses disclosed primitive 18
2024-11-20 23:56:07 +01:00
Laura Hausmann
7542310e3e
[backend] Improve validation of AP activities & objects
This commit addresses disclosed primitives 4-5, 7-9, 12-17 & 21-22 (CVE-2024-51403, CVE-2024-51404, CVE-2024-51405)
2024-11-20 23:56:02 +01:00
Laura Hausmann
1b79c99459
[package] Bump version 2024-11-20 04:36:45 +01:00
Laura Hausmann
6558941d72
[docs] Fix typo 2024-11-20 04:27:33 +01:00
Laura Hausmann
1b38e438aa
[docs] Fix typo 2024-11-20 04:27:25 +01:00
Laura Hausmann
e202766386
Release: v2023.12.10 2024-11-20 04:25:30 +01:00
Laura Hausmann
c1e1c391f8
[backend] Apply rate limits to proxyServer and fileServer
This resolves a DoS / DDoS / request amplification attack vector that is being actively exploited.
2024-11-20 04:21:51 +01:00
Laura Hausmann
416dbb5887
[backend] Don't treat HTTP 429 errors as non-retryable 2024-11-17 16:12:47 +01:00
Laura Hausmann
447bd10ec0
[frontend] Fix inline replies on chrome >= 130 only partially being displayed 2024-11-07 23:51:48 +01:00
Laura Hausmann
b5831f5a91
[frontend] Fix inline replies on chrome >= 130 2024-11-07 23:30:45 +01:00
mia
3adb155ed4
[backend] Use authenticated resolver for poll updates 2024-11-04 19:52:25 -08:00
morotesovtannu
25ac7812ef [client] Update translations (Japanese)
Currently translated at 95.5% (1804 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/ja/
2024-11-02 13:00:00 +01:00
AverageDood
215af5d4e1 [client] Update translations (Spanish)
Currently translated at 100.0% (1889 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/es/
2024-10-22 14:26:34 +02:00
morotesovtannu
8908ad2013 [client] Update translations (Japanese)
Currently translated at 94.1% (1778 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/ja/
2024-10-19 14:58:57 +02:00
mia
34823aa7b8 [backend] Fetch pinned notes with following user
fixes #567
2024-10-16 21:16:52 +02:00
mia
32faf7e0ea [build] Add stage labels to container images 2024-10-14 03:02:24 +02:00
mia
1e60ed665d [backend] Use configured prefix for redis messaging 2024-10-14 03:02:24 +02:00
mia
db306e2829 Disable yarn telemetry 2024-10-14 03:02:24 +02:00
Laura Hausmann
cc89de3e5c
[backend] Fix typo 2024-10-11 07:13:02 +02:00
mia
a70db57df9 [backend] Add prometheus metrics endpoint 2024-10-11 07:08:51 +02:00
sugar
fdd97dce7d Allow searching for uppercased letters in emoji picker 2024-10-11 07:07:40 +02:00
mia
23533c1aaa
[backend] Switch job queue to BullMQ
Signed-off-by: mia <mia@mia.jetzt>
2024-10-11 00:17:34 +02:00
Laura Hausmann
7074a2efaf
[backend] Canonicalize URLs before comparing them during object id consistency checks in the AP resolver 2024-09-18 23:37:09 +02:00
zotan
ca12d54c81
[docs] Update firefish migration guide 2024-09-14 17:36:07 +02:00
Laura Hausmann
e753462c01
[backend] Don't federate edits of local-only notes (resolves #566) 2024-09-10 20:05:54 +02:00
Laura Hausmann
05c540f52c
[docs] Update firefish migration guide 2024-09-10 18:09:20 +02:00
Laura Hausmann
f5f058fb3a
[docs] Update firefish migration guide 2024-09-06 17:40:03 +02:00
Laura Hausmann
e723dc2a03
[docs] Update firefish migration guide 2024-09-06 02:22:31 +02:00
Laura Hausmann
648bac3140
[docs] Fix typo in firefish migration guide 2024-09-06 02:11:53 +02:00
Laura Hausmann
db905fb76f
Update README.md 2024-09-05 21:35:36 +02:00
Laura Hausmann
f70f9a0d4b
[docs] Update firefish migration guide, drop mk12 and foundkey migration guides 2024-09-05 21:34:30 +02:00
Laura Hausmann
bbc4fd6550
[docs] Fix typo in redis patch 2024-09-05 20:46:06 +02:00
Laura Hausmann
38166a58e7
[docs] Add redis patch for firefish v1.0.5-rc reverts 2024-09-05 20:42:30 +02:00
Laura Hausmann
f14d8a7eab
Update README.md 2024-08-13 00:02:03 +02:00
b01ff81475 [client] Update translations (Korean)
Currently translated at 90.5% (1710 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/ko/
2024-08-09 19:14:24 +02:00
04ffa2f885 [client] Update translations (Korean)
Currently translated at 87.5% (1654 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/ko/
2024-08-07 19:31:20 +02:00
Mae Dartmann
fb6929bd36
[docker] install linux-headers for re2/node-gyp 2024-07-29 14:16:33 +02:00
AverageDood
660d464c1e [client] Update translations (Spanish)
Currently translated at 100.0% (1889 of 1889 strings)

Translation: Iceshrimp/locales
Translate-URL: https://translate.iceshrimp.dev/projects/iceshrimp/locales/es/
2024-07-29 10:17:26 +02:00
Laura Hausmann
1d8b274ae8
Release: v2023.12.9 2024-07-29 00:16:48 +02:00
Laura Hausmann
630d6bdbe5
[backend] Limit node-fetch responses to a reasonable length in all places 2024-07-28 19:15:37 +02:00
Laura Hausmann
5c659b1306
Revert "[backend] Improve JSON-LD context size limiter"
This reverts commit 9a8b7efcd6.
2024-07-28 19:02:13 +02:00
Laura Hausmann
e9f776c7b2
[backend] Bump node-fetch version 2024-07-28 19:02:10 +02:00
Laura Hausmann
9a8b7efcd6
[backend] Improve JSON-LD context size limiter 2024-07-28 17:00:00 +02:00
Laura Hausmann
d9d6dc1b60
[backend] Limit fetched JSON-LD context size to 1MB 2024-07-28 16:17:13 +02:00
Laura Hausmann
62d9c743a5
[yarn] Update dependencies 2024-07-28 16:16:57 +02:00
Laura Hausmann
96dce1ada0
[backend] Update summaly version 2024-07-28 16:00:22 +02:00
Laura Hausmann
91dddc439f
[sdk] Rename iceshrimp-js package to iceshrimp-sdk
This resolves possible confusion between iceshrimp-js (this project) and iceshrimp-sdk (the package)
2024-07-23 23:15:19 +02:00
Laura Hausmann
cc9bc79466
[backend] Set opts.removeOnComplete when discarding corrupt jobs (since the opts object is likely also corrupted) 2024-07-23 21:00:21 +02:00