Claire dc8f1fbd97

Merge pull request from GHSA-9928-3cp5-93fm ...

* Fix attachments getting processed despite failing content-type validation

* Add a restrictive ImageMagick security policy tailored for Mastodon

* Fix misdetection of MP3 files with large cover art

* Reject unprocessable audio/video files instead of keeping them unchanged

2023-07-06 15:05:05 +02:00

..

account_associations.rb

Rewrite import feature (#21054)

2023-05-02 12:08:48 +02:00

account_avatar.rb

Fix metadata scrubbing removing color profile from images (#20389)

2022-11-11 09:20:10 +01:00

account_counters.rb

Fix account deletion sometimes failing because of optimistic locks (#16317)

2021-06-02 17:41:25 +02:00

account_finder_concern.rb

Fix situations in which instance actor can be set to a Mastodon-incompatible name (#22307)

2023-01-18 16:33:03 +01:00

account_header.rb

Fix metadata scrubbing removing color profile from images (#20389)

2022-11-11 09:20:10 +01:00

account_interactions.rb

Fix own posts not getting delivered to own lists (#24810)

2023-05-03 19:17:40 +02:00

account_merging.rb

Autofix Rubocop Style/RedundantBegin (#23703)

2023-02-19 07:09:40 +09:00

account_search.rb

Revert "Rails 7 update" (#25667)

2023-07-02 11:14:22 +02:00

attachmentable.rb

Merge pull request from GHSA-9928-3cp5-93fm

2023-07-06 15:05:05 +02:00

cacheable.rb

Fix cache_associated no longer working (#7320)

2018-05-03 10:41:41 +02:00

domain_materializable.rb

Fix unbounded recursion in account discovery (#22025)

2022-12-07 00:15:24 +01:00

domain_normalizable.rb

Fix error when invalid domain name is submitted (#19474)

2022-11-14 08:07:14 +01:00

expireable.rb

Run rubocop formatting except line length (#23632)

2023-02-18 06:56:20 +09:00

follow_limitable.rb

Fix being able to import more than allowed number of follows (#15384)

2020-12-26 23:52:46 +01:00

has_user_settings.rb

Change user settings to be stored in a more optimal way (#23630)

2023-03-30 14:44:00 +02:00

ldap_authenticable.rb

Fix unescaped user input in LDAP query (#24379)

2023-04-04 12:42:38 +02:00

lockable.rb

Rename with_lock to with_redis_lock to avoid confusion with ActiveRecord's method (#24741)

2023-05-02 18:16:07 +02:00

omniauthable.rb

Drop EOL Ruby 2.7 (#24237)

2023-04-27 01:46:18 +02:00

paginable.rb

Autofix Rubocop Style/Lambda (#23696)

2023-02-18 12:39:00 +01:00

pam_authenticable.rb

Autofix Rubocop Style/RedundantBegin (#23703)

2023-02-19 07:09:40 +09:00

rate_limitable.rb

Add specific rate limits for posting and following (#13172)

2020-03-08 15:17:39 +01:00

redisable.rb

Refactor how Redis locks are created (#18400)

2022-05-13 00:02:35 +02:00

relationship_cacheable.rb

Cache relationships in API (#6482)

2018-02-18 03:14:46 +01:00

remotable.rb

Autofix Rails/EagerEvaluationLogMessage (#23429)

2023-02-07 03:44:36 +01:00

status_safe_reblog_insert.rb

Revert "Rails 7 update" (#25667)

2023-07-02 11:14:22 +02:00

status_snapshot_concern.rb

Fix edits with no actual changes being allowed (#17843)

2022-03-26 00:38:44 +01:00

status_threading_concern.rb

Refactoring relations_map (#24195)

2023-03-21 10:32:58 +01:00