Eugen Rochko b1349342d2 Fix rendering <a> without href when scheme unsupported (#13040) ...

- Disallow links with relative paths
- Disallow iframes with non-http protocols and relative paths

Close #13037

2020-02-08 21:22:38 +01:00

..

controllers

Change signature verification to ignore signatures with invalid host (#13033)

2020-02-03 17:48:23 +01:00

fabricators

Add announcements (#12662)

2020-01-23 22:00:13 +01:00

features

Add feature test that tests behaviour of profile name and bio (#12658)

2020-01-03 02:44:06 +01:00

fixtures

Add noopener and/or noreferrer (#12202)

2019-10-24 22:44:42 +02:00

helpers

Split AccountsHelper from StatusesHelper (#12078)

2019-10-24 22:50:09 +02:00

lib

Fix rendering <a> without href when scheme unsupported (#13040)

2020-02-08 21:22:38 +01:00

mailers

Add password challenge to 2FA settings, e-mail notifications (#11878)

2019-09-18 16:37:27 +02:00

models

Search account domain in lowercase (#13016)

2020-02-01 15:42:24 +01:00

policies

Change admin UI for hashtags and add back whitelisted trends (#11490)

2019-08-05 19:54:29 +02:00

presenters

Admission-based registrations mode (#10250)

2019-03-14 05:28:30 +01:00

requests

Fix localization test failing due to order of locale definitions (#12393)

2019-11-15 21:00:09 +01:00

routing

Move create/destroy actions for api/v1/statuses to namespace (#3678)

2017-06-10 09:39:26 +02:00

serializers/activitypub

Fix account URI in UpdatePollSerializer (#11194)

2019-06-27 19:41:55 +02:00

services

Fix media attachments without file being uploadable (#12562)

2020-01-23 21:40:03 +01:00

support

Fix base64-encoded file uploads not being possible (#12748)

2020-01-04 01:54:07 +01:00

validators

Search account domain in lowercase (#13016)

2020-02-01 15:42:24 +01:00

views

Remove Atom feeds and old URLs in the form of GET /:username/updates/:id (#11247)

2019-07-07 16:16:51 +02:00

workers

Fix RefollowWorker not keeping show_reblogs setting (#12707)

2020-01-02 20:52:39 +01:00

rails_helper.rb

Fix records not being indexed sometimes (#12024)

2019-10-01 01:19:11 +02:00

spec_helper.rb

Move rspec examples to tmp dir (#12539)

2019-12-02 19:55:08 +01:00