Claire 6f36b633a7 Merge pull request from GHSA-vm39-j3vx-pch3 ...

* Prevent different identities from a same SSO provider from accessing a same account

* Lock auth provider changes behind `ALLOW_UNSAFE_AUTH_PROVIDER_REATTACH=true`

* Rename methods to avoid confusion between OAuth and OmniAuth

2024-02-14 15:16:07 +01:00

..

account_associations.rb

Add notifications for statuses deleted by moderators (#17204)

2022-01-17 09:41:33 +01:00

account_avatar.rb

Properly remove tIME chunk from PNG uploads (#27111)

2023-10-10 13:51:56 +02:00

account_counters.rb

Fix account deletion sometimes failing because of optimistic locks (#16317)

2021-06-02 17:41:25 +02:00

account_finder_concern.rb

Fix situations in which instance actor can be set to a Mastodon-incompatible name (#22307)

2023-01-18 16:33:03 +01:00

account_header.rb

Properly remove tIME chunk from PNG uploads (#27111)

2023-10-10 13:51:56 +02:00

account_interactions.rb

Add follow request banner on account header (#20785)

2022-12-15 18:50:11 +01:00

account_merging.rb

Update fix-duplicates maintenance task (#17731)

2022-03-12 08:33:11 +01:00

attachmentable.rb

Change GIF max matrix size error to explicitly mention GIF files (#27927)

2023-12-04 15:28:02 +01:00

cacheable.rb

Fix cache_associated no longer working (#7320)

2018-05-03 10:41:41 +02:00

domain_materializable.rb

Fix unbounded recursion in account discovery (#22025)

2022-12-07 00:15:24 +01:00

domain_normalizable.rb

Fix error when invalid domain name is submitted (#19474)

2022-11-14 08:07:14 +01:00

expireable.rb

Fix not being able to change world filter expiration back to “Never” (#15858)

2021-03-12 05:25:50 +01:00

follow_limitable.rb

Fix being able to import more than allowed number of follows (#15384)

2020-12-26 23:52:46 +01:00

ldap_authenticable.rb

Fix unescaped user input in LDAP query (#24379)

2023-04-04 12:41:27 +02:00

lockable.rb

Refactor how Redis locks are created (#18400)

2022-05-13 00:02:35 +02:00

omniauthable.rb

Merge pull request from GHSA-vm39-j3vx-pch3

2024-02-14 15:16:07 +01:00

paginable.rb

allow pagination by min_id and max_id (#14776)

2020-09-12 17:09:49 +02:00

pam_authenticable.rb

Fix LDAP/PAM/SAML/CAS users not being approved instantly (#10621)

2019-04-25 02:49:25 +02:00

rate_limitable.rb

Add specific rate limits for posting and following (#13172)

2020-03-08 15:17:39 +01:00

redisable.rb

Refactor how Redis locks are created (#18400)

2022-05-13 00:02:35 +02:00

relationship_cacheable.rb

Cache relationships in API (#6482)

2018-02-18 03:14:46 +01:00

remotable.rb

Autofix Rails/EagerEvaluationLogMessage (#23429)

2023-02-07 03:44:36 +01:00

status_snapshot_concern.rb

Fix edits with no actual changes being allowed (#17843)

2022-03-26 00:38:44 +01:00

status_threading_concern.rb

Remove dead code and refactor status threading code (#20357)

2022-11-10 22:30:00 +01:00