3ec00398a3
fix: security with notes/show endpoint
2023-12-31 19:21:59 +01:00
233eff48f3
merge: pleroma note import - Use hashed filename for exists check ( #283 )
...
Reviewed-on: https://git.joinsharkey.org/Sharkey/Sharkey/pulls/283
2023-12-31 18:43:38 +01:00
b1c26201ca
upd: Note Length customization
...
note length is now configurable through the config file
Closes #281
falls back to 3000 (misskey default) if not used/included in config
2023-12-31 18:22:02 +01:00
031d748d0c
fix: /oauth/oauth to /oauth
2023-12-31 17:25:38 +01:00
61c193c08f
lint
2023-12-31 16:17:45 +00:00
8d6d5923da
Simplify hash steps
2023-12-31 11:14:41 -05:00
327694d4cf
Use base64url digest
2023-12-31 09:13:51 -05:00
e9428a5a05
Use hex digest
2023-12-31 09:03:46 -05:00
6d5d3d9ea1
auth-fetch: ask to never cache responses
...
I could have factored out all the lines that set cache headers, but
that would have made future merges even more complicated ☹
thanks ShittyCopper for reporting the problem!
2023-12-31 13:27:38 +00:00
1d5a0d0777
chore: use @misskey-dev/eslint-plugin ( #12860 )
...
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-31 15:26:57 +09:00
b700fadbe3
upd: add home as a visibility for mastodon imports
2023-12-31 06:32:39 +01:00
07f06d7ed6
fix: if condition
2023-12-31 04:09:44 +01:00
fc6581b948
fix: correct followers visibility on import
2023-12-31 03:50:05 +01:00
667daebb79
upd: prevent vanilla mastodon imports from importing DMs
...
Also adds the visibility function to mastodon imports
2023-12-31 03:48:51 +01:00
0bb0d69543
Use hashed filename for exists check
2023-12-30 20:44:31 -05:00
2a33981811
chore: use summaly, browser-image-resizer, and sharp-read-bmp on registry.npmjs.org instead of git ( #12856 )
...
* chore: use @misskey-dev/summaly on registry.npmjs.org instead of git
* fix backend dependency
* fic backend dependency
* @misskey-dev/sharp-read-bmp
* fix
* use @misskey-dev/browser-image-resizer
2023-12-31 09:45:35 +09:00
5f2e07d81f
Revert unnecessary changes to backend package.json
2023-12-29 20:05:19 +01:00
5af915e17e
Merge branch 'develop' into feature/config-dropdir
2023-12-29 20:04:22 +01:00
7948018e6a
feat: Add support for TrueMail ( #12850 )
...
Co-authored-by: MarryDream <2190758465@qq.com>
2023-12-29 18:23:29 +09:00
18e82c0627
fix: frontend not being able to build
2023-12-28 19:37:22 +01:00
870f70a683
upd: up sfm.js version
2023-12-28 13:06:11 +01:00
9a9f61a6c0
fix: typecheck
2023-12-28 12:52:12 +01:00
592027cf68
merge: upstream
2023-12-28 09:54:32 +01:00
530a282524
fix(test): CIが落ちている問題を修正 ( #12816 )
...
* fix(test): CIが落ちているのを修正
* fix(ci)?: CIの`typecheck`が落ちる問題を修正
* fix(ci): コンフィグファイルのタイポを修正
2023-12-28 09:46:46 +01:00
3f60d7c44b
Add a prompt for Tor Browser users ( #12776 )
...
* perf: Add a prompt for Tor Browser users
* typo
2023-12-28 09:46:46 +01:00
544b8106b2
feat(backend/oauth): allow CORS for token endpoint ( #12814 )
...
* feat(backend/oauth): allow CORS for token endpoint
* no need to explicitly set origin to `*`
* Update CHANGELOG.md
2023-12-28 09:46:19 +01:00
82822e29d9
Merge pull request from GHSA-7pxq-6xx9-xpgm
...
* fix: fix improper authorization when accessing with third-party application
* refactor: refactor type definitions
* fix: get rid of unnecessary access limitation
* enhance: サードパーティアプリケーションがWebsocket APIを使えるように
* fix: add missing parentheses
* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"
This reverts commit 5150053275
2023-12-28 09:45:54 +01:00
790f509ebe
fix(backend): 非センシティブのみ（リモートはいいねのみ）が昨日していない問題を修正 ( #12801 ) ( #12802 )
...
Co-authored-by: sorairo <sorairo@shiosyakeyakini.info>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-28 09:45:15 +01:00
8daff4a998
refactor(frontend): Reactivityで型を明示するように ( #12791 )
...
* refactor(frontend): Reactivityで型を明示するように
* fix: プロパティの参照が誤っているのを修正
* fix: 初期化の値を空配列に書き換えていた部分をnullに置き換え
2023-12-28 09:45:15 +01:00
34cdba6c11
fix: 自分のdirect noteがuser list timelineに追加されない ( #12782 )
...
* fix: 自分のdirect noteがuser list timelineに追加されない
* docs(changelog): Fix: 自分のdirect noteがuser list timelineに追加されない
2023-12-28 09:43:12 +01:00
6f65091cef
fix: lint ( #12761 )
2023-12-28 09:42:47 +01:00
f743cba26b
fix(backend): 1702718871541-ffVisibility.jsのdownが壊れている ( #12767 )
2023-12-28 09:42:47 +01:00
42cc909c5b
enhance(backend): センシティブワードの設定がハッシュタグトレンドにも適用されるように
2023-12-28 09:42:47 +01:00
1f5256b99c
upd: mute reaction notifications if thread is muted
...
Closes #263
2023-12-27 23:53:37 +01:00
06d110a773
Lock glob to exact package version 10.3.10
2023-12-27 21:02:10 +01:00
93094bcb72
Keep only the changes to loading the config files using glob patterns
2023-12-27 16:35:14 +01:00
df7f4aa3ec
Add support for glob syntax to config file env variables
...
This change allows loading config files using glob syntax, for
exakple `production-*.yml` to load all config files prefixed with
*production*. With this change the config file can also be configured
using two additional env variables `SHARKEY_CONFIG_YML`
and `SHARKEY_CONFIG_FILE`.
2023-12-27 16:08:37 +01:00
8b31c12607
Merge branch 'develop' into feature/config-dropdir
2023-12-27 14:11:42 +01:00
64d34f595c
Change loadConfig to load all yaml files in the config directory
2023-12-27 14:09:59 +01:00
a598baaf01
fix(test): CIが落ちている問題を修正 ( #12816 )
...
* fix(test): CIが落ちているのを修正
* fix(ci)?: CIの`typecheck`が落ちる問題を修正
* fix(ci): コンフィグファイルのタイポを修正
2023-12-27 17:36:38 +09:00
e0040f5da3
Add a prompt for Tor Browser users ( #12776 )
...
* perf: Add a prompt for Tor Browser users
* typo
2023-12-27 15:55:56 +09:00
ad346b6f36
feat(backend/oauth): allow CORS for token endpoint ( #12814 )
...
* feat(backend/oauth): allow CORS for token endpoint
* no need to explicitly set origin to `*`
* Update CHANGELOG.md
2023-12-27 15:10:24 +09:00
c96bc36fed
Merge pull request from GHSA-7pxq-6xx9-xpgm
...
* fix: fix improper authorization when accessing with third-party application
* refactor: refactor type definitions
* fix: get rid of unnecessary access limitation
* enhance: サードパーティアプリケーションがWebsocket APIを使えるように
* fix: add missing parentheses
* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"
This reverts commit 5150053275
2023-12-27 15:08:59 +09:00
9022b05fea
fix(backend): 非センシティブのみ（リモートはいいねのみ）が昨日していない問題を修正 ( #12801 ) ( #12802 )
...
Co-authored-by: sorairo <sorairo@shiosyakeyakini.info>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-26 18:42:37 +09:00
75034d9240
refactor(frontend): Reactivityで型を明示するように ( #12791 )
...
* refactor(frontend): Reactivityで型を明示するように
* fix: プロパティの参照が誤っているのを修正
* fix: 初期化の値を空配列に書き換えていた部分をnullに置き換え
2023-12-26 14:19:35 +09:00
5bc036180f
upd: module versions
2023-12-25 21:37:13 +01:00
fd040c50b1
fix: 自分のdirect noteがuser list timelineに追加されない ( #12782 )
...
* fix: 自分のdirect noteがuser list timelineに追加されない
* docs(changelog): Fix: 自分のdirect noteがuser list timelineに追加されない
2023-12-25 11:56:00 +09:00
fd57c7e24c
merge: authorized fetch ( #247 )
...
Closes #217
2023-12-24 10:02:53 +01:00
cae40e68e4
fix: lint ( #12761 )
2023-12-24 15:24:51 +09:00
36701f8a7c
fix(backend): 1702718871541-ffVisibility.jsのdownが壊れている ( #12767 )
2023-12-24 15:24:26 +09:00
6fce36374d
enhance(backend): センシティブワードの設定がハッシュタグトレンドにも適用されるように
2023-12-24 15:23:56 +09:00
a3dd61dec4
fix logging
2023-12-23 21:27:48 +00:00
e6c02909c7
fix typo
...
thanks @Marie
2023-12-23 20:11:53 +00:00
53365159e8
merge: real-time updates on note detail view ( #246 )
...
Closes #223
Reviewed-on: https://git.joinsharkey.org/Sharkey/Sharkey/pulls/246
Reviewed-by: Marie <marie@kaifa.ch>
2023-12-23 21:00:00 +01:00
477cda0b63
authorized fetch: log when things go wrong
2023-12-23 15:26:42 +00:00
1984416e3e
authorized fetch: let /@instance.actor through
...
this is probably never actually used, but it still looks like a good
idea (also, FireFish does it)
thanks @ShittyKoper for noticing!
2023-12-23 15:26:42 +00:00
e5ea882ed7
authorized fetch #217
...
the implementation is copied from the other places we already check
HTTP signatures, and cross-checked with Firefish's implementation
2023-12-23 15:26:42 +00:00
6526968f2d
fix: check
2023-12-23 16:08:04 +01:00
683b4aafb2
real-time updates on note detail view
...
`useNoteCapture` already subscribes to all updates for a note, so
we can tell it when a note gets replied to, too
Since I'm not actually adding any extra subscription in the client,
just an extra callback, there should be no overhead when replies are
not coming in.
Also, all the timelines already call `useNoteCapture` for each note
displayed, so we know the whole `GlobalEventService` thing works fine.
Many thanks to VueJS for taking care of all the DOM complications
2023-12-23 14:09:51 +00:00
b3b89567ee
merge: upstream
2023-12-23 14:26:24 +01:00
2f425aa03f
fix: ブロックされててもpure RNできる ( #12758 )
...
なぜかわからないけど元々Quoteはできるようなのでそれに戻しました
2023-12-23 17:55:34 +09:00
e852f4b60d
Revert "fix(backend): renote判定がおかしい"
...
This reverts commit f43599552f
2023-12-23 17:55:27 +09:00
f43599552f
fix(backend): renote判定がおかしい
2023-12-23 17:54:29 +09:00
6e4894c165
lint
2023-12-23 14:39:01 +09:00
5b5a537f56
feat: 登録を拒否するメールアドレスのドメインを手動で設定できるように ( #12740 )
...
* feat: 使い捨てアドレスのドメインを手動で設定できるように
* Update CHANGELOG.md
* disposableEmailDomains -> bannedEmailDomains
* isBlockedHostを使うように
2023-12-23 12:06:22 +09:00
b3c4f7eddc
fix: email verify enable logic ( #12743 )
2023-12-23 11:00:14 +09:00
220344c552
fix: email validation
2023-12-23 02:15:12 +01:00
5db583a3eb
merge: upstream
2023-12-23 02:09:23 +01:00
e0155cffae
add: Custom MOTDs
...
This works almost exactly like FF's custom MOTDs with the only difference being that they get defined in the config file for performance reasons.
Closes #86
2023-12-22 13:10:21 +01:00
52b94dbc4a
fix: 引用RNがpure RNとして連合され、pure RNが引用RNとして連合される ( #12744 )
...
* fix: quote notes are rendered as pure renote
* fix: filesが指定されてて空配列のときにQuote扱いされる
* chore: isQuoteの仕様をmisc/is-quote.tsと揃える
* docs: is-quote.tsの方にNoteCreateService.isQuoteのことを書いて更新忘れを防ぐ
2023-12-22 14:03:39 +09:00
433d46e57f
fix(backend): テストが死んでいるのを修正 ( #12738 )
...
* fix test
* fix test
* fix test
* fix test
* fix test
2023-12-22 09:06:13 +09:00
043f26c895
upd: improve performance for checking if instance is marked as NSFW on images
2023-12-21 23:15:49 +01:00
4ca3c05487
upd: make new posts be marked as NSFW if instance is marked as NSFW
...
Closes #226
2023-12-21 23:15:03 +01:00
9c6a7aed98
fix: websocket for timelines not checking following for muted instance users
...
Closes #233
2023-12-21 22:42:06 +01:00
90f8d8e575
upd: fix tag view not respecting blocks and suspensions
...
Closes #234
2023-12-21 22:24:23 +01:00
79ca93cefb
enhance: api.jsonのレスポンスの内容を実際の内容に合わせる ( #12723 )
...
* Create packedAdSchema
* admin/emoji/add
* admin/get-user-ips
* admin/roles/users
* admin/get-index-stats
* admin/accounts/find-by-email
* fix type of admin/ad/list
* federation/stats
* endpoints
* get-online-users-count
* i/2fa/register-key
* i/2fa/key-done
* i/2fa/register
* i/apps
* i/authorized-apps
* i/registry/get-all
* i/registry/get
* i/registry/get-detail
* i/registry/key-with-type
* i/registry/scopes-with-domain
* i/update-email
* i/move
* i/webhooks/create
* fix miss type
* i/webhooks/show
* i/webhooks/list
* flash/create
* roles/users
* server-info
* test
* users/lists/get-memberships
* users/achievements
* fetch-rss
* fetch-external-resources
2023-12-21 16:57:05 +09:00
b2254a66d3
chore: remove hashtag from featured immediately ( #12668 )
...
* chore: remove hashtag from featured immediately
* docs(changelog): ハッシュタグのトレンド除外設定が即時に効果を持つように修正
---------
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-21 11:34:19 +09:00
b3ab96b5ee
fix(backend): ロールアサインの通知がある状態でページをリロードすると通知欄に何もでなくなる
...
Fix #12729
2023-12-21 11:23:31 +09:00
15b0d2aff2
enhance: ロールにアサインされたときの通知 ( #12607 )
...
* wip
* Update misskey-js.api.md
* Update CHANGELOG.md
* Update RoleService.ts
* Update locales/ja-JP.yml
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
* Update UserListService.ts
* Update misskey-js.api.md
* fix (#12724 )
---------
Co-authored-by: かっこかり <67428053+kakkokari-gtyih@users.noreply.github.com>
Co-authored-by: おさむのひと <46447427+samunohito@users.noreply.github.com>
2023-12-21 10:39:11 +09:00
d14eb20122
chore(workflows): use postgres 15 everywhere ( #12726 )
2023-12-21 10:29:51 +09:00
4175b7809b
chore(QueueProcessorService): show error stack for failures ( #12727 )
2023-12-21 10:29:30 +09:00
cf3299312a
merge: allow themes to specify a font ( #230 )
...
Closes #225
Closes #25
2023-12-19 11:35:24 +01:00
4e2d802967
enhance: “つながりの公開範囲”がフォロー・フォロワー個別設定できるように ( #12702 )
...
* Enhance: “つながりの公開範囲”がフォロー・フォロワー個別設定できるように (#12072 )
* refactor: crowdin 編集部分のコミットを打ち消し
https://github.com/misskey-dev/misskey/pull/12702#issuecomment-1859417158
* refactor: オブジェクトの名前修正
https://github.com/misskey-dev/misskey/pull/12702#issuecomment-1859417158
* fix: 設定項目の説明を削除
名称が具体的になって必要なくなったため
https://github.com/misskey-dev/misskey/pull/12702#discussion_r1429932463
2023-12-18 20:59:20 +09:00
f6ff3b1f1a
Fix: Renoteの判定が間違っているのを修正 ( #12706 )
...
* RNと引用RNの判定が間違っているのを修正
* remove dump.rdb
* update CHANGELOG.md
* lint fix
2023-12-18 19:49:19 +09:00
13990279c3
enhance: Unicode 15.0で新たに追加された絵文字をリアクションに使えるように ( #12683 )
2023-12-18 14:51:29 +09:00
507d436699
update mfm-js
2023-12-18 13:22:34 +09:00
8a9f4ef441
update deps
2023-12-18 13:14:58 +09:00
5150053275
fix(backend): add missing kind definition for admin endpoints to improve security
2023-12-18 12:32:26 +09:00
c92c2d065f
upd: replace mfm with sfm
2023-12-18 03:03:05 +01:00
2ecc0299b4
update deps
2023-12-16 14:00:27 +09:00
fda5147d06
fix(dev): ファイルの読み込みに失敗することがあるのを修正 ( #12684 )
...
* (enhance) コード入力をMkCodeEditorに変更
* (fix) devでファイルの読み込みに失敗することがある
* Revert "(enhance) コード入力をMkCodeEditorに変更"
This reverts commit 726d56c3e962680efc5b5a166e2210d09730341f.
2023-12-16 13:23:25 +09:00
9f49b9f4d2
fix(backend): HTTP Digestヘッダのアルゴリズム部分に大文字の"SHA-256"しか使えない
...
Fix #12678
2023-12-16 10:58:44 +09:00
3e256eee2c
Fix(backend): JSONSchemaに不足しているパラメータを追加 ( #12680 )
...
* Fix(backend): JSONSchemaに不足しているパラメータを追加
* nullable:falseに修正
---------
Co-authored-by: sorairo <sorairo@shiosyakeyakini.info>
2023-12-16 09:00:32 +09:00
bd4d8694dd
perf: early return users/notes and users/featured-notes if me is blocked by requesting user ( #12663 )
2023-12-15 11:24:13 +09:00
5cc3d3c873
Remove an unnecessary type assertion ( #12666 )
2023-12-15 11:22:49 +09:00
7f2a66f262
allow a theme to specify a font - #225
2023-12-14 14:24:10 +00:00
417852779f
enhance: アイコンデコレーションの位置を微調整できるように
2023-12-14 20:58:08 +09:00
386fcedf35
(dev-mode) devモードの改善 ( #12639 )
...
* fix dev-mode
* fix dev-mode
* fix dev-mode
* fix dev-mode
---------
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-14 20:16:02 +09:00
a2a6a94614
update deps
2023-12-14 18:28:04 +09:00
aedc1d0ee9
update deps
2023-12-14 13:22:12 +09:00
Marie
dakkar
smitten
tamaina
trivernis
Trivernis
MomentQYC
Chocolate Pie
Kagami Sascha Rosylight
shiosyakeyakini
zyoshoka
anatawa12
Nya Candy
おさむのひと
syuilo
GrapeApple0
zawa-ch
1STEP621
かっこかり
woxtu
Gianni Ceccarelli