Commit Graph

25990 Commits

Author SHA1 Message Date
Chocolate Pie 82822e29d9
Merge pull request from GHSA-7pxq-6xx9-xpgm
* fix: fix improper authorization when accessing with third-party application

* refactor: refactor type definitions

* fix: get rid of unnecessary access limitation

* enhance: サードパーティアプリケーションがWebsocket APIを使えるように

* fix: add missing parentheses

* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"

This reverts commit 5150053275.

* frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする

* enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加

* enhance(test): Websocket APIに対するテストも追加

* enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合

* fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正

* enhance(backend): Websocketの接続に最低限必要な権限を変更

* fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように

* fix(backend): エンドポイントにアクセスするために必要な権限を変更

* fix(frontend/locale): Add missing type declaration

* chore: update `misskey-js/src/autogen`

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-12-28 09:45:54 +01:00
GrapeApple0 6415a789ae
refactor: paginationの型を明示する (#12809)
* refactor: paginationの型を明示する

* asではなくsatisfiesを使うように
2023-12-28 09:45:16 +01:00
shiosyakeyakini 790f509ebe
fix(backend): 非センシティブのみ(リモートはいいねのみ)が昨日していない問題を修正 (#12801) (#12802)
Co-authored-by: sorairo <sorairo@shiosyakeyakini.info>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-12-28 09:45:15 +01:00
zyoshoka 8daff4a998
refactor(frontend): Reactivityで型を明示するように (#12791)
* refactor(frontend): Reactivityで型を明示するように

* fix: プロパティの参照が誤っているのを修正

* fix: 初期化の値を空配列に書き換えていた部分をnullに置き換え
2023-12-28 09:45:15 +01:00
かっこかり f9c7b44ef8
(dev) Issue Templateに、自分で実装してPRを出したいかの意思表明を追加 (#12799)
* Update 01_bug-report.yml

* Update 02_feature-request.yml
2023-12-28 09:44:42 +01:00
Soli 6876eca6b5
fix(frontend): ロールアサイン時の通知で,ロールアイコンが縮小されずに表示される問題を修正 (misskey-dev#12805) (#12806) 2023-12-28 09:44:14 +01:00
FineArchs 9c17e0f976
Feat: クリックイベントを発生させるMFM構文を追加 (#12798)
* Update MkMisskeyFlavoredMarkdown.ts

* fix MkMisskeyFlavoredMarkdown.ts

* Update MkAsUi.vue

* Update ui.ts

* Fix MkMisskeyFlavoredMarkdown.ts

* Update CHANGELOG.md

* fix ui.ts

* revert CHANGELOG.md

* Update CHANGELOG.md
2023-12-28 09:43:49 +01:00
Sayamame-beans adf13f79bd
fix(frontend): モデログ表示の"logYellow"が機能していない問題を修正 (#12794)
* fix: logYellow of moderation log was not working

* docs(changelog): Fix: 一部のモデログ(logYellowでの表示対象)について、表示の色が変わらない問題を修正
2023-12-28 09:43:12 +01:00
anatawa12 34cdba6c11
fix: 自分のdirect noteがuser list timelineに追加されない (#12782)
* fix: 自分のdirect noteがuser list timelineに追加されない

* docs(changelog): Fix: 自分のdirect noteがuser list timelineに追加されない
2023-12-28 09:43:12 +01:00
anatawa12 7ce353bcc7
chore(misskey-js): update misskey-js with api.json (#12778)
pnpm build && pnpm build-misskey-js-with-types && pnpm --filter misskey-js api
2023-12-28 09:43:12 +01:00
zyoshoka ed3e30581f
refactor(frontend): import宣言周りのエラーを修正 (#12773) 2023-12-28 09:43:12 +01:00
syuilo 4b36ed728d
Update CHANGELOG.md 2023-12-28 09:42:48 +01:00
syuilo 20a52ceb07
Update CHANGELOG.md 2023-12-28 09:42:48 +01:00
syuilo e90919ca75
New Crowdin updates (#12759)
* New translations ja-jp.yml (Spanish)

* New translations ja-jp.yml (Chinese Traditional)

* New translations ja-jp.yml (Korean)

* New translations ja-jp.yml (Korean)
2023-12-28 09:42:48 +01:00
Nya Candy 6f65091cef
fix: lint (#12761) 2023-12-28 09:42:47 +01:00
おさむのひと f743cba26b
fix(backend): 1702718871541-ffVisibility.jsのdownが壊れている (#12767) 2023-12-28 09:42:47 +01:00
syuilo 42cc909c5b
enhance(backend): センシティブワードの設定がハッシュタグトレンドにも適用されるように 2023-12-28 09:42:47 +01:00
Marie 2201cd6d0c merge: another batch of small ui tweaks (#255) 2023-12-28 09:02:18 +01:00
Marie 1f5256b99c
upd: mute reaction notifications if thread is muted
Closes #263
2023-12-27 23:53:37 +01:00
Marie 3f6fbbaf05
upd: improve indication of multiple poll
Closes #202
2023-12-27 23:30:25 +01:00
trivernis 06d110a773
Lock glob to exact package version 10.3.10 2023-12-27 21:02:10 +01:00
trivernis 93094bcb72
Keep only the changes to loading the config files using glob patterns 2023-12-27 16:35:14 +01:00
trivernis df7f4aa3ec
Add support for glob syntax to config file env variables
This change allows loading config files using glob syntax, for
exakple `production-*.yml` to load all config files prefixed with
*production*. With this change the config file can also be configured
using two additional env variables `SHARKEY_CONFIG_YML`
and `SHARKEY_CONFIG_FILE`.
2023-12-27 16:08:37 +01:00
Trivernis 8b31c12607 Merge branch 'develop' into feature/config-dropdir 2023-12-27 14:11:42 +01:00
trivernis 64d34f595c
Change loadConfig to load all yaml files in the config directory 2023-12-27 14:09:59 +01:00
ShittyKopper 5d746d4ee5 fix: hide photoswipe alt text when its empty 2023-12-27 13:19:29 +03:00
Amelia Yukii dd22d7b683 chore: update hard word mute icon 2023-12-27 10:16:22 +01:00
Marie 45b99a476d upd: swap `api` out with `apiWithDialog` for word mute saving
Closes #259
2023-12-27 09:39:59 +01:00
ShittyKopper 6242f37111 Partial Revert "fix: fix: notification count position"
Firefox now implements :has. There is no reason for this workaround

This partially reverts commit 4f0bc185af.
2023-12-26 22:09:25 +03:00
ShittyKopper aafdcccd24 fix: note history not working 2023-12-26 22:02:48 +03:00
ShittyKopper 32318bbbfa fix: un-hardcode more border radius values
all of these are blind find and replace, no clue if they end up breaking
anything
2023-12-26 22:02:48 +03:00
ShittyKopper 62a5793e71 fix: don't show filename as alt text 2023-12-26 22:02:48 +03:00
ShittyKopper 2f5c51c1ca fix: don't load text of empty draft
this fixes a small ux quirk where blanking a reply and cancelling it
results in an empty reply next time you try to reply to that note, accidentally
un-tagging everyone
2023-12-26 22:02:48 +03:00
Marie 5bc036180f upd: module versions 2023-12-25 21:37:13 +01:00
Marie a67d31c963 merge: KaTeX support (#261)
Closes #174
2023-12-25 21:28:25 +01:00
dakkar 8fd72fa12c remove spurious indent 2023-12-25 19:51:41 +00:00
dakkar 8d291ef039 formula component based on katex
thanks a lot to MoshiBar for the initial implementation!
2023-12-25 18:12:55 +00:00
Marie 6f63ff62fc fix: autocomplete on users being janky 2023-12-25 18:40:49 +01:00
dakkar 62a0f43c84 add package 2023-12-25 17:31:21 +00:00
Marie fd57c7e24c merge: authorized fetch (#247)
Closes #217
2023-12-24 10:02:53 +01:00
dakkar a3dd61dec4 fix logging 2023-12-23 21:27:48 +00:00
dakkar e6c02909c7 fix typo
thanks @Marie
2023-12-23 20:11:53 +00:00
Marie 53365159e8 merge: real-time updates on note detail view (#246)
Closes #223

Reviewed-on: https://git.joinsharkey.org/Sharkey/Sharkey/pulls/246
Reviewed-by: Marie <marie@kaifa.ch>
2023-12-23 21:00:00 +01:00
Marie eb036d558f fix: note footer not properly resizing 2023-12-23 19:21:37 +01:00
Marie 978ee64fd1 Merge: always use black shadow in SK instance ticker (#254)
Closes #223
2023-12-23 18:57:38 +01:00
dakkar e14a06cd16 always use black shadow in instance ticker #238
we know this looks decent because it's what the MkInstanceTicker
already does
2023-12-23 15:31:19 +00:00
dakkar 477cda0b63 authorized fetch: log when things go wrong 2023-12-23 15:26:42 +00:00
dakkar 1984416e3e authorized fetch: let /@instance.actor through
this is probably never actually used, but it still looks like a good
idea (also, FireFish does it)

thanks @ShittyKoper for noticing!
2023-12-23 15:26:42 +00:00
dakkar e5ea882ed7 authorized fetch #217
the implementation is copied from the other places we already check
HTTP signatures, and cross-checked with Firefish's implementation
2023-12-23 15:26:42 +00:00
Marie 6526968f2d fix: check 2023-12-23 16:08:04 +01:00