1401 Commits

Author	SHA1	Message	Date
zotlabs	7dc99cb4a4	typo	2017-09-05 18:56:25 -07:00
zotlabs	45eb61bcf0	provide sharing of cards	2017-09-05 18:32:37 -07:00
zotlabs	80400d7191	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge	2017-09-05 17:35:56 -07:00
zotlabs	6147f819ce	avoid a security patch and resultant compatibility issues; instead restrict the input characters we accept in token verification strings to hex digits. This will all be changing in the coming weeks/months anyway.	2017-09-05 17:12:31 -07:00
Mario Vavti	68a91ec3ea	32 characters are often not enough to distinguish gnu-social mids - use the entire mid. in /display if we are not dealing with posts (eg likes) provide the thr_parent mid as bParam_mid so we can still adress the right post in javascript	2017-09-05 23:18:02 +02:00
zotlabs	d58f965b9a	some more prep work for Zot VI - some of this will need to be undone or at least re-arranged later but we need to bootstrap a test environment.	2017-09-04 22:35:54 -07:00
zotlabs	83d0e48ebe	some preliminary work on Zot VI	2017-09-04 22:35:44 -07:00
zotlabs	ca58ef80ae	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge	2017-09-04 22:33:53 -07:00
zotlabs	05654e4980	card embed improved	2017-09-04 21:02:44 -07:00
Mario Vavti	c8000fca1f	Default Access Control List (ACL) -> Default Privacy Group and minor template fix	2017-09-04 20:48:26 +02:00
Mario Vavti	b4f8136315	whitespace	2017-09-04 13:34:17 +02:00
Mario Vavti	06f1910ac0	fix the error reporting query in /display. we need item_deleted instead of item_flags and remove id = $item_hash from the query since we always provide the mid and never the id iirc	2017-09-04 13:28:49 +02:00
zotlabs	ba4f75ba19	also error if no security context	2017-09-03 23:58:52 -07:00
zotlabs	fc62f07a08	validate the security context	2017-09-03 23:50:18 -07:00
zotlabs	3d0a7f4fc5	paths in xchan_addr no longer means RSS specifically but could be activitypub	2017-09-03 22:09:16 -07:00
zotlabs	47ef41695a	sign zot-info packets with httpsignatures	2017-09-03 19:56:13 -07:00
zotlabs	4adf2caaa6	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge	2017-09-03 17:17:20 -07:00
zotlabs	db82d303e2	only validate headers that aren't "spoofable", which will be somewhat implementation dependent.	2017-09-03 17:12:42 -07:00
Mario Vavti	0fac35686b	Merge remote-tracking branch 'mike/master' into dev	2017-09-03 21:49:01 +02:00
Mario Vavti	5ae2d15dc0	this fixes an issue where in /channel/membername?mid=some_mid updates did not work when static updates were enabled. since in the current situation we always get a top-level-post mid, item_thread_top = 0 in the query will never return a result. change it to item_thread_top = 1	2017-09-03 21:41:47 +02:00
Mario Vavti	dc18440c18	introduce item_normal_update(). the differnce to item_normal() is that we do not query for item_deleted = 0 and therefor can find deleted likes which allows us to update our unlikes on the fly if static page update is enabled	2017-09-03 21:33:07 +02:00
zotlabs	499b7de0d2	Reviewed. This is OK. ... Revert "may be exploitable in current form - awaiting review" This reverts commit 7bff60edac.	2017-09-03 00:59:51 -07:00
Mario Vavti	1a0cf2666a	Merge remote-tracking branch 'mike/master' into dev	2017-09-02 23:52:31 +02:00
zotlabs	7bff60edac	may be exploitable in current form - awaiting review	2017-09-02 14:04:37 -07:00
Mario Vavti	e935473c5c	add combined index for item.uid and item.item_unseen. this speeds up notifications by a magnitude.	2017-09-01 21:27:59 +02:00
Mario Vavti	3af3b36db3	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into dev	2017-09-01 10:41:07 +02:00
git-marijus	9333503600	Merge pull request #850 from anaqreon/doco ... Fix the multiple table of content bug	2017-09-01 10:40:24 +02:00
zotlabs	5bffae6219	cut down on a few extraneous gprobe processes	2017-08-31 23:21:06 -07:00
zotlabs	ae8cdc3b42	some changes after testing server-to-server magic auth	2017-08-31 21:38:03 -07:00
zotlabs	b413beeb36	add server-to-server magic auth to dav and cdav controllers	2017-08-31 20:45:13 -07:00
zotlabs	6d87311394	now letsencrypt is creating a .htaccess file with re-write rules which kills most of our .well-known routes	2017-08-31 17:47:32 -07:00
zotlabs	aec92e0e17	whitespace	2017-08-30 23:16:57 -07:00
zotlabs	c364bff0c1	missing include	2017-08-30 21:57:56 -07:00
zotlabs	f436ec6f21	some issues with mod_display on very first anonymous page visit (prior to any browser cookies being set)	2017-08-30 18:55:56 -07:00
zotlabs	be097bf415	issue with mentions and xchans with @ or /	2017-08-30 16:24:26 -07:00
zotlabs	f1b014b7eb	hubzilla issue #851	2017-08-29 23:58:17 -07:00
zotlabs	ad637b5b50	Merge branch 'dev' of https://github.com/redmatrix/hubzilla into xdev_merge	2017-08-29 23:38:23 -07:00
zotlabs	5abc9ef10b	bring back nomadic locations	2017-08-29 22:08:37 -07:00
zotlabs	d47df8663f	add a nonce	2017-08-29 20:57:30 -07:00
zotlabs	973f15438a	fix category links in card bodies	2017-08-29 19:38:07 -07:00
zotlabs	1f42d23332	add reliable signatures	2017-08-29 18:46:00 -07:00
zotlabs	06be21af05	use top level for verification	2017-08-28 19:12:35 -07:00
zotlabs	ab5e7ad7a2	provide support for json-ld signatures (https://w3c-dvcg.github.io/ld-signatures/)	2017-08-28 19:06:01 -07:00
git-marijus	8517e7e798	Merge remote-tracking branch 'mike/master' into dev	2017-08-28 23:45:03 +02:00
git-marijus	e70bf97508	rewrite comment form handling	2017-08-28 23:42:17 +02:00
zotlabs	6385d11b54	AS2: recipient collection	2017-08-27 21:46:10 -07:00
zotlabs	99ca2a7cc6	fix card category widget links when a specific card is opened	2017-08-27 18:28:44 -07:00
Andrew Manning	acacea5efe	Merge remote-tracking branch 'upstream/dev' into doco	2017-08-27 23:47:14 +00:00
Andrew Manning	49b38bd71b	Merge remote-tracking branch 'upstream/dev' into doco	2017-08-25 11:32:28 +00:00
Andrew Manning	75f3e9202e	Removed duplicated table of contents (TOC) in Help pages by breaking hierarchical TOC loading.	2017-08-25 11:32:18 +00:00