mastodon/app/lib
nightpool 94d0e012de Whitelist allowed classes for federated statuses (#3810)
* Whitelist allowed classes for federated statuses

Allowed classes are currently:

 - Any microformats class (h/p/u/dt/e-*)
 - the classes mention, hashtag, ellipses and invisible.

this last one is somewhat suspect, but Mastodon currently uses it to render hidden link text.

resolved #3790

* Fix code style
2017-06-17 20:26:05 +02:00
..
settings Refactor Setting (#3302) 2017-05-25 14:14:36 +02:00
application_extension.rb Conditional validations no longer accept strings for if/unless (#3124) 2017-05-19 03:11:23 +02:00
atom_serializer.rb Remove redundant code in AtomSerializer and spec (#3528) 2017-06-03 20:51:08 +02:00
exceptions.rb Add check for visibility.nil? even though it can't ever be, to check for race conditions 2017-04-03 22:54:46 +02:00
extractor.rb Skip formatting for cashtag in status text (#3275) 2017-05-24 14:32:53 +02:00
feed_manager.rb Improve RuboCop rules (compatibility to Code Climate) (#3636) 2017-06-08 13:24:28 +02:00
formatter.rb Remove some arguments of Formatter.instance.format and spec (#3541) 2017-06-04 14:58:57 +02:00
hash_object.rb Migrate from ledermann/rails-settings to rails-settings-cached which allows global settings 2017-01-12 20:46:24 +01:00
inline_rabl_scope.rb Optimize filter methods in FeedManager a bit, use redis pipelining on merge/unmerge feed methods, 2017-04-04 13:01:14 +02:00
inline_renderer.rb Replace calls to FeedManager#inline_render and #broadcast 2017-04-05 19:45:18 +02:00
language_detector.rb Language detection defaults to nil (#3666) 2017-06-09 18:09:37 +02:00
provider_discovery.rb A minor change for ProviderDiscovery and spec (#3543) 2017-06-04 14:59:40 +02:00
sanitize_config.rb Whitelist allowed classes for federated statuses (#3810) 2017-06-17 20:26:05 +02:00
status_filter.rb Fix regression from #3490 - filter out hidden statuses from ancestors/descendants even if the viewer is anonymous (#3752) 2017-06-15 02:00:08 +02:00
stream_entry_finder.rb Improve api oembed controller (#3450) 2017-05-30 16:30:06 -04:00
tag_manager.rb Remove some code in TagManager and spec (#3547) 2017-06-04 16:14:25 +02:00
user_settings_decorator.rb Add preference setting for delete toot modal (#3368) 2017-05-29 17:56:13 +02:00
webfinger_resource.rb Allow webfinger controller to reply to user@WEB_DOMAIN in addition to user@LOCAL_DOMAIN (#2351) 2017-04-23 14:19:54 +02:00