Claire 4fb4721072

Merge pull request from GHSA-58x8-3qxw-6hm7 ...

* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`

2024-07-04 16:26:49 +02:00

..

chewy

Add new public status index (#26344)

2023-08-24 16:40:04 +02:00

config/initializers

Merge pull request from GHSA-q3rg-xx5v-4mxh

2024-05-30 14:14:04 +02:00

controllers

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

fabrication

Restore console behavior in test env (#26401)

2023-08-09 11:26:56 +02:00

fabricators

Fix results/query in api/v1/featured_tags/suggestions (#29597)

2024-05-17 12:30:00 +02:00

features

Add admin notifications for new Mastodon versions (#26582)

2023-09-01 17:47:07 +02:00

fixtures

Improve encoding detection for link cards (#30780)

2024-07-03 10:57:46 +02:00

generators

Clean up the post deployment migration generator (#24233)

2023-04-11 11:25:29 +02:00

helpers

Merge pull request from GHSA-jhrq-qvrm-qr36

2024-02-16 11:56:12 +01:00

lib

Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316)

2024-05-29 16:39:26 +02:00

locales

Replace i18n view spec with helper spec (#24966)

2023-05-15 17:25:04 +02:00

mailers

Add admin notifications for new Mastodon versions (#26582)

2023-09-01 17:47:07 +02:00

models

Remove caching in cache_collection (#29862)

2024-05-17 12:30:00 +02:00

policies

Fix moderator rights inconsistencies (#26729)

2023-09-06 16:40:19 +02:00

presenters

Fix call to inefficient delete_matched cache method in domain blocks (#28367)

2023-12-19 11:27:37 +01:00

requests

Merge pull request from GHSA-58x8-3qxw-6hm7

2024-07-04 16:26:49 +02:00

routing

Enable Style/FrozenStringLiteralComment for specs (#23790)

2023-02-22 09:55:31 +09:00

search/models/concerns

Add search tests (#26703)

2023-09-08 16:17:55 +02:00

serializers

Fix incorrect serialization of regional languages in contentMap (#27207)

2023-12-04 15:28:15 +01:00

services

fix: Return HTTP 422 when scheduled status time is less than 5 minutes (#30584)

2024-07-03 10:57:46 +02:00

support

Add end-to-end (system) tests (#25461)

2023-07-28 23:09:49 +02:00

system

Add end-to-end (system) tests (#25461)

2023-07-28 23:09:49 +02:00

validators

Add coverage for URLValidator (#25591)

2023-07-28 23:12:25 +02:00

views/statuses

Update rubocop and rubocop-rspec (#26329)

2023-08-22 09:31:40 +02:00

workers

Automatically switch from open to approved registrations in absence of moderators (#29337)

2024-02-22 14:39:42 +01:00

rails_helper.rb

Change registrations to be disabled by default for new servers (#29353)

2024-02-22 18:15:59 +01:00

spec_helper.rb

Change registrations to be disabled by default for new servers (#29353)

2024-02-22 18:15:59 +01:00