volse-hubzilla.git - Volse Hubzilla -- soft fork of main Hubzilla core for Volse

	Commit message (Collapse)	Author	Age	Files	Lines
*	move articles to addon	Mario	2022-05-04	2	-370/+0
\|
*	move cards to addon	Mario	2022-05-04	4	-356/+11
\|
*	hubloc in AS has been moved from data to meta a while ago	Mario Vavti	2022-04-26	1	-2/+2
\|
*	whitespace	Mario Vavti	2022-04-25	1	-1/+1
\|
*	if we have not been provided a profile id set the profile id to the default ↵	Mario Vavti	2022-04-25	1	-0/+4
\| \| \| \|	profile - fixes #1671
*	fix regression with incoming poll answers from activitypub	Mario Vavti	2022-04-23	1	-1/+1
\|
*	move AP addressing to pubcrawl	Mario Vavti	2022-04-07	1	-122/+14
\| \| \|	(cherry picked from commit 1390e1db399c06cb76e191437eb5be24dd95a5c7)
*	fixes in regard to hub re-installs: dismiss deleted hublocs, make sure we ↵	Mario	2022-04-01	3	-11/+11
\| \| \| \|	use the latest hubloc entry for addressing, in Queue::deliver() prefer primaries since their info is probably more accurate
*	make sure to set comments_closed to the created date if nocomment is set	Mario Vavti	2022-03-23	1	-1/+1
\|
*	streamline comment policy with downstream	Mario	2022-03-23	1	-14/+4
\|
*	Merge branch 'security-fixes-lfi-xss-open-redirect' into 'dev'	Mario	2022-03-23	10	-47/+47
\|\ \| \| \| \| \| \| \| \|	Security fixes See merge request hubzilla/core!2017
\| *	CVE-2022-27256: Open redirect via rpath query param.	Harald Eilertsen	2022-03-20	10	-27/+27
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Don't follow urls to external sites when submitting forms from the settings modules. This mitigates an Open Redirect vulnerability where an attacker could trick a user to go to an attacker controlled destination. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666
\| *	CVE-2022-27258: XSS via rpath query param.	Harald Eilertsen	2022-03-20	10	-20/+20
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Escape URLs provided by the rpath query param in settings modules. This prevents a possible Cross-Site scripting vulnerability, where an attacker could inject web scripts and html into the settings form via the rpath query parameter, and have a user execute the script by tricking them to clicking a link. Fixes part of https://framagit.org/hubzilla/core/-/issues/1666
* \|	add the signing algo to zotinfo, and store it in import_xchan() if present	Mario	2022-03-20	2	-0/+9
\|/
*	make sure an announce does not overwrite an item we already have and make ↵	Mario	2022-03-11	1	-0/+7
\| \| \| \|	sure it will be a toplevel post
*	whitespace	Mario	2022-03-10	1	-35/+35
\|
*	support for hs2019	Mario	2022-03-10	2	-16/+61
\|
*	move attachments to the top	Mario	2022-03-05	1	-5/+5
\|
*	fix regression	Mario	2022-03-04	1	-2/+2
\|
*	streamline event activity handling	Mario	2022-03-04	1	-11/+80
\|
*	port some ap quirks from the addon	Mario	2022-03-04	1	-15/+50
\|
*	more work on enhanced content filters	Mario	2022-03-03	2	-3/+39
\|
*	collect the accept headers in an array	Mario	2022-03-03	1	-2/+6
\|
*	Merge branch 'dev' of https://framagit.org/hubzilla/core into dev	Mario	2022-03-02	1	-2/+2
\|\
\| *	Merge branch 't0rum-master-patch-68993' into 'master'	Mario	2022-03-01	1	-2/+2
\| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \| \|	Typo in Setup.php prevents users from using Postgres See merge request hubzilla/core!2014 (cherry picked from commit 0e2e9321025f87fe9587f3d183adaea6185e4e20) d384f55d Typo in Setup.php prevents users from using Postgres
* \|	port some peertube tweeks from pubcrawl to lib/activity	Mario	2022-03-02	1	-20/+47
\|/
*	enhanced content filters	Mario	2022-03-01	5	-75/+230
\|
*	make gprobe deal with URLs, fix issue in get_actor_protocols and fix missing ↵	Mario	2022-02-28	3	-15/+41
\| \| \| \|	author issue if wall2wall comment arrives and author is not yet known
*	widget descriptions and add content region to all pdl files for convenience	Mario	2022-02-23	34	-59/+190
\|
*	this was required for old style forum posts only and should not be needed ↵	Mario	2022-02-21	1	-9/+11
\| \| \| \|	anymore
*	do not require network for forums widget	Mario	2022-02-21	1	-1/+0
\|
*	remove deprecated widgets and add some more widget descriptions	Mario	2022-02-21	27	-166/+148
\|
*	merge branch pdledit_gui into dev - many widgets still miss their ↵	Mario	2022-02-20	11	-9/+612
\| \| \| \|	description and requirements (this is work in progress)
*	thr_parent lost across edits	Mario	2022-02-18	1	-0/+1
\|
*	php8 warnings	Mario	2022-02-13	3	-10/+13
\|
*	address deprecation warnings	Mario	2022-02-13	5	-15/+23
\|
*	add inbound support for quoteUrl	Mario	2022-02-13	1	-0/+38
\|
*	make sure we have an array	Mario	2022-02-11	1	-2/+2
\|
*	typo	Mario	2022-02-11	1	-1/+1
\|
*	minor restructure to omit php 8.1 deprecation warning	Mario	2022-02-11	1	-3/+10
\|
*	allow to override the DB charset via the $db_charset variable in .htconfig.php	Mario	2022-02-10	1	-2/+12
\|
*	fix php8.1 deprecation warning	Mario	2022-02-09	1	-1/+1
\|
*	gc() returns bool	Mario	2022-02-09	1	-1/+1
\|
*	revert: union types are only possible from php version 8 and higher	Mario	2022-02-09	1	-2/+2
\|
*	rename variable	Mario	2022-02-08	1	-6/+6
\|
*	revert logging	Mario	2022-02-08	1	-2/+0
\|
*	revert deleted flag for webfinger and zotfinger key	Mario	2022-02-08	2	-21/+11
\|
*	HTTPSig: introduce the deleted keytype. this will allow us to not fetch an ↵	Mario	2022-02-08	1	-6/+30
\| \| \| \|	actor we have never seen before if we received a delete activity for this actor for some reason. this is only implemented in the activitypub inbox so far.
*	Merge branch 'dev' of https://framagit.org/hubzilla/core into dev	Mario Vavti	2022-02-08	3	-4/+29
\|\
\| *	to reduce overall network fetches cache actors in Activity::fetch() and ↵	Mario	2022-02-08	2	-3/+11
\| \| \| \| \| \| \| \|	fetch the ldsig creator with get_actor() instead of get_compound_property() so that it will check the cache before actually fetching