erici/snacforge
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
4,133 Commits 1 Branch 2 Tags
6ea6733bcaec6e43333340e75a46de654eeaf712
Commit Graph
4133 Commits
This Branch
This Branch
All Branches
Author SHA1 Message Date
grunfink 6ea6733bca Updated RELEASE_NOTES. 2026-02-14 05:50:38 +01:00
grunfink 11140d0e0c Also show 'url' in notifications. 2026-02-14 05:48:46 +01:00
grunfink ebcdb74865 Use the 'url' link instead of 'id' (if there is one) in html_actor_icon(). 2026-02-14 05:42:45 +01:00
grunfink 01c412dd81 Updated RELEASE_NOTES. 2026-02-11 15:37:52 +01:00
grunfink 8dea2cb93e Merge pull request 'mastoapi: add uri field to verify_credentials' (#555) from ag-eitilt/snac2:mastoapi/credentials-uri into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/555
 2026-02-11 15:35:17 +01:00
Sam May f67d501b96 mastoapi: add uri field to verify_credentials 
Mastodon split the field out from `url` for identification purposes in
version 4.2.0, leaving the previous for simply navigating to the user
page.  Some services (notably Bridgy Fed) rely on the `uri` as part of
their OAuth flow: https://github.com/snarfed/bridgy-fed/issues/2339
 2026-02-10 12:19:07 -08:00
grunfink d0906957cd mastoapi: added a (dummy) client_secret_expires_at value in app creation. 2026-02-10 06:10:29 +01:00
grunfink 6919600d43 Updated TODO. 2026-02-10 05:57:27 +01:00
grunfink 6f8eb9ced3 In timelines, always create a 'people/' link, not only if follower or following. 2026-02-10 05:44:59 +01:00
grunfink 77478f9e60 Merge pull request 'Update Portuguese (Brazil) translation' (#554) from daltux/snac2:pt_BR-9 into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/554
 2026-02-10 05:36:26 +01:00
Daltux 2e98442b23 Merge branch 'master' into pt_BR-9 2026-02-10 01:40:51 +01:00
grunfink e39303124f Merge pull request 'po/de_DE.po update' (#553) from zen/snac2:master into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/553
 2026-02-09 18:02:11 +01:00
Daltux dc3e03d09d Update Brazilian translation 
New strings (abbreviated months) translated.

Fix notification filter list parallelism.

Fix clear meaning of a button.
 2026-02-09 08:43:28 -03:00
zen 72676c2a23 po/de_DE.po update 2026-02-08 11:48:41 +01:00
grunfink 1543bb74f8 Added a 'webfinger' field to 'Person' objects. 2026-02-07 17:41:28 +01:00
grunfink 027f0e71bd Updated RELEASE_NOTES. 2026-02-07 17:04:41 +01:00
grunfink 28d21ff667 Merge pull request 'Bug fix: Poll voting in mastoapi: Check global object store + Prevent voting when not allowed' (#552) from davidrv00/snac2-fork:vote-fix into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/552
 2026-02-07 17:04:00 +01:00
grunfink f0d6f2b131 Updated RELEASE_NOTES. 2026-02-07 17:03:05 +01:00
grunfink 655dd95177 Merge pull request 'Add poll creation to mastoapi' (#551) from davidrv00/snac2-fork:poll-mastoapi into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/551
 2026-02-07 17:02:16 +01:00
grunfink 313b72d3ac Merge pull request 'snac(8): Words of caution for strip_exif configuration' (#549) from oxzi/snac2:strip-metadata-man-warning into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/549
 2026-02-07 17:01:11 +01:00
grunfink 8a8d78980e Updated RELEASE_NOTES. 2026-02-07 17:00:53 +01:00
grunfink 4087e74071 Merge branch 'master' of grunfink-codeberg:grunfink/snac2 2026-02-07 16:59:53 +01:00
grunfink 841b726f71 Merge pull request 'strip_exif support for the OpenBSD sandbox' (#548) from oxzi/snac2:strip-metadata-openbsd into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/548
 2026-02-07 16:59:33 +01:00
David Vaughan 8c959fcd64 Prevent voting via mastoapi if closed or we already voted 2026-02-06 16:02:27 -08:00
David Vaughan fdb2be4621 Check global object store for poll id when voting via mastoapi 2026-02-06 12:08:18 -08:00
David Vaughan 140247f1fd Add poll creation to mastoapi 2026-02-06 12:07:10 -08:00
grunfink 64ace918d2 Updated RELEASE_NOTES. 2026-02-06 07:51:08 +01:00
grunfink 79cf2cae39 Updated TODO. 2026-02-06 07:04:42 +01:00
Alvar Penning 110032fb48 snac(8): Words of caution for strip_exif configuration 
Add words of caution and reasoning to the "strip_exif" configuration for
the server.json file, as these commands would be executed outside of the
sandbox - at least on OpenBSD - and both have quite a history on
security issues due to their huge attack surface and variety of
supported protocols.

After getting comfortable with the related code, I would continue using
it on a personal instance, but would reconsider enabling "strip_exif" on
shared instances with multiple users.

IMO, snac administrators should at least know of potential dangers.
 2026-02-05 22:52:35 +01:00
Alvar Penning ea81780895 strip_exif support for the OpenBSD sandbox 
Change the strip_exif logic to work with the already existing OpenBSD
sandbox and allow ffmpeg and mogrify to be executed.

The previous strip_exif implementation relied on system(3), effectively
starting "/bin/sh" and executing the required tool within a shell
session. Making this work in the sandbox would require to allow
executing "/bin/sh", rendering the sandbox useless.

Thus, the code now starts determining the absolute path of the tools -
unless they are given as ffmpeg_path or mogrify_path - and allowing them
to be executed via unveil(2). Then, instead of the system(3) call, the
good old fork(2) and execve(2) dance is performed.

The sbox_enter code was made aware of strip_exif, which resulted in a
pledge(2) violation before when disable_email_notifications was set to
false. Furthermore, the detected paths of the tools are now allowed.
 2026-02-05 21:17:44 +01:00
grunfink 81e461395e Updated TODO. 2026-02-05 14:01:35 +01:00
grunfink 7e8e126587 Updated RELEASE_NOTES. 2026-02-04 05:49:53 +01:00
grunfink 98f41a2b7e Updated RELEASE_NOTES. 2026-02-03 13:21:44 +01:00
grunfink 6738775357 Fixed typo in Czech lang file. 2026-02-03 08:35:01 +01:00
grunfink 26c2ccd839 Merge pull request 'Update po/cs.po' (#546) from pmjv/snac2:master into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/546
 2026-02-03 08:34:21 +01:00
grunfink 86359ddf67 Call xs_replace_i() in html_date_label() instead of overwriting. 2026-02-03 08:18:59 +01:00
pmjv a0b2cd727f Update po/cs.po 2026-02-03 08:08:51 +01:00
grunfink 8048ef20d2 Merge pull request 'Update po/cs.po' (#545) from pmjv/snac2:master into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/545
 2026-02-03 08:08:36 +01:00
pmjv bac90e7260 Update po/cs.po 2026-02-03 08:07:14 +01:00
grunfink e682da336f Merge branch 'master' of comam.es:git/snac2 2026-02-03 07:15:30 +01:00
grunfink 083a3387fc Tweaked check_signature() for GET variables. 
Instead of unconditionally stripping ? variables when retrieving the keyId,
try first calling actor_request() directly, and only strip them and retry
if it fails.
 2026-02-03 07:15:22 +01:00
grunfink 725f6d9d34 Re-reverted po/cs.po. 2026-02-02 18:44:28 +01:00
grunfink bd50f1a083 Reverted po/cs.po. 2026-02-02 18:43:08 +01:00
grunfink 8dd51011df Use the translated month names in date labels. 2026-02-02 18:10:01 +01:00
grunfink 7d24c6ff94 Added translatable month names. 2026-02-02 17:51:40 +01:00
grunfink 1f41a45091 Merge pull request 'Update pt_BR translations' (#543) from daltux/snac2:pt_BR-8 into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/543
 2026-02-01 07:45:50 +01:00
Daltux 50c9cb63b1 Update pt_BR translations. 2026-01-30 23:02:55 -03:00
grunfink f7073bfe61 Updated language files. 2026-01-28 06:03:31 +01:00
grunfink 50dce8af53 Added ... to 'Notifications filter' string. 2026-01-28 05:56:46 +01:00
grunfink 7d55e40633 Merge pull request 'typo in notification filter' (#539) from zen/snac2:master into master 
Reviewed-on: https://codeberg.org/grunfink/snac2/pulls/539
 2026-01-28 05:54:45 +01:00