mastodon/lib
Claire c4f2609f7a
Merge pull request from GHSA-ccm4-vgcc-73hp
* Tighten allowed HTML in oEmbed-based preview cards

* Sanitize preview cards at render time

* Add `sandbox` attribute to preview card iframes
2023-07-06 15:03:33 +02:00
..
active_record Apply Rubocop Performance/BindCall (#23437) 2023-02-08 09:10:25 +09:00
assets Expand Stylelint glob to include CSS files (#22469) 2023-01-05 13:42:13 +01:00
chewy/strategy Change root Chewy strategy to emit a warning instead of erroring out in production mode (#24327) 2023-04-04 12:41:27 +02:00
devise Fix authentication before 2FA challenge (#11943) 2019-09-24 04:35:36 +02:00
generators
json_ld Fixed code quality issues (#15541) 2021-01-31 21:26:09 +01:00
mastodon Fix tootctl accounts approve --number N not aproving N earliest registrations (#24605) 2023-07-06 13:45:40 +02:00
paperclip blurhash_transcoder: prevent out-of-bound reads with <8bpp images (#20388) 2022-11-11 07:45:16 +01:00
rails Apply Rubocop Performance/BindCall (#23437) 2023-02-08 09:10:25 +09:00
redis Change Redis#exists calls to Redis#exists? to avoid deprecation warning (#14191) 2020-07-01 19:05:21 +02:00
sanitize_ext Merge pull request from GHSA-ccm4-vgcc-73hp 2023-07-06 15:03:33 +02:00
simple_navigation Add customizable user roles (#18641) 2022-07-05 02:41:40 +02:00
tasks Apply Rubocop Rails/RootPublicPath (#23447) 2023-02-08 10:38:07 +01:00
templates
terrapin Add Ruby 3.0 support (#16046) 2021-05-06 14:22:54 +02:00
webpacker Add subresource integrity for JS and CSS assets (#15096) 2020-11-06 11:56:31 +01:00
cli.rb Add ability for admins to delete canonical email blocks (#16644) 2021-12-17 23:02:14 +01:00
exceptions.rb Fix error when passing unknown filter param in REST API (#20626) 2022-11-14 08:06:06 +01:00
public_file_server_middleware.rb Add hardened headers to user-uploaded files (#25756) 2023-07-06 14:32:26 +02:00