Commit graph

400 commits

Author SHA1 Message Date
Michael 8ce1797480 Systems added to the federation statistics 2024-03-14 04:33:19 +00:00
Hypolite Petovan 5c5d7eb04f
Fix several vulnerabilities (#13927)
* Escape HTML in the location field of a calendar event post

- This allowed script tags to be interpreted in the post display of an event.

* Add form security token check to /admin/phpinfo module

- This prevents basic XSS attacks against /admin/phpinfo

* Add form security token check to /babel module

- This prevents basic XSS attacks against /babel

* Prevent pass-through for attachments

- This addresses a straightforward Reflected XSS vulnerability if a malicious HTML/Javascript file is attached to a post through upload

* Prevent overwriting cid on event edit

- This allowed to share an event as any other user after zeroing the cid field of an existing event
2024-02-22 06:53:52 +01:00
Michael Vogel d5c0f086bd
Disallow mail addresses for registration (#13920)
* Disallow mail addresses for registration

* Order for allow/disallow has been changed
2024-02-19 09:33:20 +01:00
Michael d2702dfe9c Use centralized functions for tag string handling 2024-01-28 06:32:55 +00:00
Michael Vogel 09edf251ee
Anti spam measures against hashtag spam (#13855) 2024-01-25 19:41:07 +01:00
Michael 6389133575 Expiry post search index entries 2024-01-21 16:24:59 +00:00
Michael 23b247d1c3 Merge remote-tracking branch 'upstream/develop' into channel-relay 2024-01-15 19:41:26 +00:00
Michael f83f61f7ac "ANY_VALUE" is removed 2024-01-15 16:45:24 +00:00
Michael d2a74d1936 New option to disallow 2024-01-07 19:22:56 +00:00
Michael 89e7420237 Friendica copyright changed from 2023 to 2034 2024-01-02 20:57:26 +00:00
Michael Vogel 9592292dba
Improved server detection / new servers added to federation statistics (#13793)
* Improved server detection / new servers added to federation statistics

* Fix wrong color code
2024-01-02 20:12:37 +01:00
Michael Vogel f23ecaff6a
Posts per author/server on the community pages (#13764)
* Posts per author/server on the community pages

* Updated database.sql
2023-12-25 12:39:15 +01:00
Hypolite Petovan 67f57a7f90 Avoid passing null value to number_format() in Module\Admin\Federation
- Address part of https://github.com/friendica/friendica/issues/13699#issuecomment-1848363608
2023-12-09 07:32:24 -05:00
Michael 5a844cd31e The value of "cron interval" wasn't displayed correctly 2023-12-06 21:19:38 +00:00
Michael 5e27b5790c Some site configuration descriptions are improved 2023-12-04 22:19:57 +00:00
Michael cb91800088 "worker_fetch_limit" is moved as well 2023-12-03 22:49:35 +00:00
Michael 5cd85d9bb7 "items per page" is now in the site settings as well 2023-12-03 14:30:40 +00:00
Michael e99c916df1 Some more settings moved to the admin frontend 2023-12-03 13:43:48 +00:00
Michael 7bf7744efb The "cron_interval" is now reachable via the admin site settings 2023-12-03 11:20:37 +00:00
Michael e87c79780a "min_poll_interval" moved as well 2023-12-03 11:08:21 +00:00
Michael f93192bc28 The channel settings are now available on the site settings 2023-12-03 09:45:13 +00:00
Michael 46b1b66dbf Several settings can now be reached via the site settings 2023-11-28 00:57:51 +00:00
Michael 077c9ff0c9 Improved control about the contact/server updates 2023-11-27 19:00:12 +00:00
Raroun 67a6bc3ea9
Update Site.php
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-11-01 07:30:34 +01:00
Raroun 4e5041af13 Updated source string in Site.php 2023-10-27 11:18:09 +02:00
Michael 174fa49b23 Fix: The calculation of unseen circles can now be deactivated again 2023-10-05 17:06:21 +00:00
Hypolite Petovan aee420152f
Merge pull request #13246 from nupplaphil/feat/addons
Introduce dynamic hook loading
2023-07-23 06:58:46 -04:00
Michael 7538f6a346 Issue 13289: Ensure to not respect deactivated connector networks 2023-07-22 10:49:42 +00:00
Philipp Holzer cba656383e
Adhere feedback
- rename hooks.config.php to strategies.config.php
- change all corresponding classes and tests
2023-07-21 22:42:24 +02:00
Philipp Holzer 14b76e48f0
Introduce dynamic hook loading
- Dynamically load addon files
- Dynamically load hooks
- Rewrite Logger-logic to use new hook logic (Monolog is working again)
2023-07-16 18:43:35 +02:00
Michael 283a33715f "kbin" hos now got an own section in the federation statistics 2023-06-29 08:28:02 +00:00
Hypolite Petovan 4f7740264e Replace "group" with "circle" in the rest of the code
- Remaining mentions already mean "forum"
2023-05-27 22:01:45 -04:00
Philipp Holzer 54b7af6ccf
Fix php-lint issue 2023-03-28 19:42:16 +02:00
Philipp Holzer c2d11328cc
adapt minor changers / fix tests 2023-03-27 19:36:14 +02:00
Philipp 73aaedac97
Apply suggestions from code review
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-03-27 19:36:14 +02:00
Philipp 36e21cacc9
Apply suggestions from code review
Switch to `isWritable`

Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-03-27 19:36:14 +02:00
Philipp Holzer fa9c3d40be
Add conditional help text for disabled fields 2023-03-27 19:36:13 +02:00
Philipp Holzer 76f3b07033
Disable setting fields in case we use environment variables 2023-03-27 19:36:13 +02:00
Josh Soref d2f9593777 spelling: unknown
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
2023-03-26 16:14:16 -04:00
Josh Soref 7a84be3c2f spelling: compatibility
Signed-off-by: Josh Soref <2119212+jsoref@users.noreply.github.com>
2023-03-26 16:03:22 -04:00
Michael 72952d2c92 Issue 11535: Automatically open and close the registration 2023-03-21 21:44:26 +00:00
Michael afe1a59345 Fetch platform and version of nomad implementations 2023-03-21 05:36:47 +00:00
Michael 9c1516feb2 Takahē and Wildebeest added, Nomad detection improved 2023-03-18 11:43:29 +00:00
Philipp 94d1e0b232
Apply suggestions from code review
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-02-19 11:26:26 +01:00
Philipp 544168244c Apply suggestions from code review
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-02-19 11:12:48 +01:00
Philipp Holzer 75ecaa89ee
Add site admin warning if BaseURL is missing 2023-02-18 21:50:07 +01:00
Philipp Holzer f0c29edcde
Adapt BaseURL calls to new UriInterface 2023-02-18 21:12:21 +01:00
Philipp Holzer 513ef03421
Revert node.config.php into Config table 2023-02-10 14:06:22 +01:00
Michael Vogel 9e9aa4b108
Update src/Module/Admin/Summary.php
Co-authored-by: Hypolite Petovan <hypolite@mrpetovan.com>
2023-01-22 21:35:24 +01:00
Michael d76963944a More configs moved to key values 2023-01-22 13:40:08 +00:00