1
0
mirror of https://github.com/mastodon/mastodon synced 2024-12-01 00:08:21 +09:00
mastodon/app
ThibG d63c3c0cef Improve streaming server security (#10818)
* Check OAuth token scopes in the streaming API

* Use Sec-WebSocket-Protocol instead of query string to pass WebSocket token

Inspired by https://github.com/kubevirt/kubevirt/issues/1242
2019-05-24 15:21:42 +02:00
..
chewy Add type, limit, offset, min_id, max_id, account_id to search API (#10091) 2019-02-26 15:21:36 +01:00
controllers Move signature verification stoplight to the requests themselves (#10813) 2019-05-23 15:22:39 +02:00
helpers Add invite request to pending account notification e-mail (#10528) 2019-04-10 00:36:01 +02:00
javascript Improve streaming server security (#10818) 2019-05-24 15:21:42 +02:00
lib Fix possible race condition when processing statuses (#10815) 2019-05-23 20:00:39 +02:00
mailers Fix error in AdminMailer#new_pending_account (#10264) 2019-03-14 14:20:22 +01:00
models Add account_id param to GET /api/v1/notifications (#10796) 2019-05-21 13:28:49 +02:00
policies Admission-based registrations mode (#10250) 2019-03-14 05:28:30 +01:00
presenters Improve blocked view of profiles (#10491) 2019-04-07 04:59:13 +02:00
serializers Add toot source to delete result to ease Delete & Redraft (#10669) 2019-05-11 06:46:43 +02:00
services Prevent from publicly boosting one's own private toots (#10775) 2019-05-18 00:28:51 +02:00
validators Fix “invited by” not showing up for invited accounts in admin interface (#10791) 2019-05-19 21:40:36 +02:00
views Change bio limit from 160 to 500 (#10790) 2019-05-19 22:51:44 +02:00
workers Retry ActivityPub inbox delivery on HTTP 401 and 408 errors (#10812) 2019-05-23 15:00:30 +02:00