aitzol/Plume
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
712 Commits 23 Branches 9 Tags 19 MiB
62c94ed463
Commit Graph

712 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Trinity Pointard
62c94ed463 Refactor and verify http signature on personnal inbox 
Verify signature on personnal inbox
Reduce code duplication
Put Headers in plume-models
 2018-10-03 20:48:25 +02:00
Trinity Pointard
0a5d435249 Verify http signatures 2018-10-03 09:31:38 +02:00
Trinity Pointard
d610ed1641 Add verify() to the Signer trait 
And implement it for Blog and User
 2018-09-30 12:08:04 +02:00
Trinity Pointard
eafe1ed490 Add content digest to signed http headers 
Sign the Digest HTTP header
 2018-09-30 12:08:04 +02:00
Trinity Pointard
fceb9ab0cd Update cookie management a bit 
Update to latest rocket_csrf
Make user_id a samesite lax cookie (see https://github.com/Plume-org/Plume/issues/233#issuecomment-422660275)
 2018-09-30 11:56:12 +02:00
Baptiste Gelez
1e3f40833d
Add a link to Loomio in the README 2018-09-29 19:25:27 +01:00
Bat
6f8630df2e Use <div> for avatars 
<img> is displayed as an error without src, in Chrome

Fixes #222
 2018-09-29 18:29:22 +01:00
Baptiste Gelez
05f3ecabd6
Merge pull request #248 from maximesrd/patch-4 
Bad commands in the update guide
 2018-09-29 17:03:33 +01:00
maximesrd
a1530791ef
Update UPDATE.md 2018-09-29 18:00:48 +02:00
Baptiste Gelez
236cf14406
Merge pull request #245 from Plume-org/rest-api 
Some API endpoints for articles
 2018-09-29 16:33:31 +01:00
Bat
72fd9eb610 API: Filter posts in the list 2018-09-29 15:45:27 +01:00
maximesrd
3b288c2dad
Update UPDATE.md 2018-09-29 15:34:59 +02:00
maximesrd
b97b0233da
Update UPDATE.md 2018-09-29 15:34:29 +02:00
maximesrd
db4c939be8
Bad commands 2018-09-29 15:02:17 +02:00
Baptiste Gelez
975f8d0393
Merge pull request #246 from fediverse-pl/master 
i18n: Update Polish translation
 2018-09-27 19:25:12 +01:00
Marcin Mikołajczak
47eeed1008 i18n: Update Polish translation 
Signed-off-by: Marcin Mikołajczak <me@m4sk.in>
 2018-09-27 12:42:09 +02:00
Bat
f893056d6d Mount the API endpoints 2018-09-25 20:45:32 +01:00
Bat
472da486e9 Fix the canapi::Provider impl for Post 2018-09-25 20:10:18 +01:00
Baptiste Gelez
ba3dd3304c
Merge pull request #243 from rhonda/master 
Updated German translation
 2018-09-25 15:38:58 +01:00
Rhonda D'Vine
88d8fb95c3 Updated German translation 2018-09-25 16:27:59 +02:00
Baptiste Gelez
9650fdbfb5
Merge pull request #242 from Atul9/fix-broken-link 
#227 Fix broken link on blog page
 2018-09-24 20:35:20 +01:00
Atul Bhosale
3dce53d899
Fix broken link on blog page 2018-09-24 23:46:32 +05:30
Baptiste Gelez
05fb7c9b42
Merge pull request #238 from Plume-org/csrf-issues 
Fix CSRF issues
 2018-09-21 13:37:35 +01:00
Baptiste Gelez
7afe249a75
Merge pull request #240 from OpenAlgeria/patch-1 
Update INSTALL.md
 2018-09-20 19:23:49 +01:00
OpenAlgeria
5d21e26406
Update INSTALL.md 2018-09-20 15:21:32 +02:00
Bat
d8ca1d70b7 Fix CSRF issues 
GET routes are not protected against CSRF. This commit changes the needed URLs to
POST and replace simple links with forms.

Thanks @fdb-hiroshima for noticing it!
 2018-09-19 18:13:07 +01:00
Trinity Pointard
f0fb030c7f Update recommended nginx config 
Update recommended nginx config to allow iframes
close #234
 2018-09-19 18:18:39 +02:00
Bat
1500267125 Add canapi and try to use for the API 2018-09-19 15:49:34 +01:00
Trinity Pointard
fab6360100 Be less restrictive on authorized html tags 
Allow users to add ids to tags
Allow users to use iframes
 2018-09-19 10:51:27 +02:00
Baptiste Gelez
2bc6052a35
Replace plume by DATABASE_NAME in the docs 
To make it clearer you can have multiple Plume instances/databases on the same server, and that this part of the URL may change too.
 2018-09-18 21:40:20 +01:00
Baptiste Gelez
d8bfd6d39f
Create ISSUE_TEMPLATE.md 2018-09-18 15:40:17 +01:00
Baptiste Gelez
064c5961e7
Add a CoC 
Finally!
 2018-09-18 13:59:43 +01:00
Baptiste Gelez
eb24ba1774
Merge pull request #223 from igalic/fix/safe-string 
make blog/instance description a SafeString
 2018-09-14 20:56:13 +01:00
Igor Galić
fb074e6344
render SafeString thru |safe 
thanks again to @fdb-hiroshima for pointing me in the right direction!
 2018-09-14 21:44:32 +02:00
Igor Galić
06718a5c8a
directly use SafeString in InstanceSettingsForm 2018-09-14 20:25:16 +02:00
Igor Galić
d62c72dde0
allocate new SafeString in FromFormValue impl 
thanks to @fdb-hiroshima for this review!
 2018-09-14 19:50:59 +02:00
Igor Galić
0897088aa5
add implementation for FromFormValue for SafeString 
thanks again to @pwoolcoc for this!
 2018-09-14 18:26:42 +02:00
Igor Galić
65e213309b
do not allocate empty strings 
follow review from @pwoolcoc, and do not use

    SafeString::new(&<String>::new())

since this makes an allocation which will then just be thrown away.
Instead, we pass ""
 2018-09-14 18:24:27 +02:00
Igor Galić
f5c299f23c
make blog/instance description a SafeString 
long_description & short_description's documentation say they can be
Markdown, but they are String, not SafeString.

This led to escaped strings being printed in the editor
https://github.com/Plume-org/Plume/issues/220
 2018-09-14 15:14:24 +02:00
Baptiste Gelez
d355379e01
Merge pull request #219 from igalic/fix/env-howto 
improve installation "docs"
 2018-09-13 19:38:00 +01:00
Igor Galić
e7b5d81687
gitignore docker-compose.yml 2018-09-13 17:21:20 +02:00
Igor Galić
dfc76757bb
fix comment in docker.sample.env 
docker's sample .env file under docs/ which contains the wrong command
to generate a rocket secret_key
 2018-09-13 17:18:25 +02:00
Bat
5b138df8ce Remove duplicated message in gl.po 2018-09-12 17:07:41 +01:00
Bat
0200a7b223 Only send notifications for mentions if the post is not a draft 2018-09-12 17:00:00 +01:00
Bat
b01212f4a6 Make it impossible to view drafts if you are not the author 
Even if you got the URL
 2018-09-12 16:58:38 +01:00
Bat
296aa2fbbb Merge branch 'master' of github.com:Plume-org/Plume 2018-09-12 13:41:10 +01:00
Baptiste Gelez
ab640011e3
Merge pull request #215 from xmgz/master 
update galician
 2018-09-12 13:37:03 +01:00
Xose M
f5633f4e7f
Merge branch 'master' into master 2018-09-12 07:40:16 +02:00
Xosé M
3d52afc804 fixed some fuzzies & new 2018-09-12 07:23:23 +02:00
Xosé M
c5d93a2951 update 2018-09-12 07:15:33 +02:00