Commit Graph

794 Commits

Author SHA1 Message Date
syuilo 0da0cc80b9 fix(server): validate url from ap to improve security 2023-02-08 17:50:23 +09:00
syuilo 650187deaf perf(client): do not render custom emojis in user names
#9778
2023-02-08 17:48:02 +09:00
tamaina 54f789bd55 fix(server): DriveFileEntityService.getPublicUrl調整
- 外部MediaProxyではビデオのサムネイルを生成できないので外部に投げない
- thumbnailUrlが存在しない場合、画像の場合はプロキシで圧縮させる
2023-02-07 14:24:15 +00:00
syuilo 5ac9d13516 Merge branch 'develop' of https://github.com/misskey-dev/misskey into develop 2023-02-07 19:59:00 +09:00
syuilo 2be1a39d13 fix(server): validate urls from ap to improve security 2023-02-07 19:58:58 +09:00
Masaya Suzuki f3c5edc852
fix: postgre -> postgres (#9814) 2023-02-07 19:50:38 +09:00
syuilo 1139632f95 fix(server): 自分のノートをお気に入りに登録しても実績解除される問題を修正 2023-02-05 14:30:07 +09:00
syuilo 0d7256678e fix(server): validate filename and emoji name to improve security 2023-02-05 14:25:37 +09:00
MeiMei 505ecf6c1f
Deny UNIX domain socket (#9802)
* Deny UNIX domain socket

* got v12ならこれが使える?
2023-02-05 13:51:59 +09:00
syuilo 6a3039f7b7 feat: ロールにアイコンを設定してユーザー名の横に表示できるように
Resolve #9761
2023-02-05 10:37:03 +09:00
tamaina faed3b438e fix(server): clean up file in FileServer 2023-02-04 13:46:19 +00:00
syuilo 4ad0345f20 fix(server): cannot follow user 2023-02-04 19:19:30 +09:00
syuilo ee74df6823 fix(server): improve security 2023-02-04 18:21:07 +09:00
syuilo 38f9d1e764 fix(client): validate urls to improve security 2023-02-04 14:20:07 +09:00
tamaina 2dfed75402
perf(server): improvement of external mediaProxy (#9787)
* perf(server): improvement of external mediaProxy

* add a comment

* ✌️

* /filesでsharpの処理を行わずリダイレクトする

* fix

* thumbnail => static

* Fix #9788

* add avatar mode

* add url

* fix

* static.webp

* remove encodeURIComponent from media proxy path

* remove existance check
2023-02-04 13:38:51 +09:00
syuilo 0c12e80106 perf(server): cache blocking 2023-02-04 12:40:40 +09:00
syuilo b7522f69e7 fix typo 2023-02-04 10:02:03 +09:00
syuilo 1d39f785f1 perf: use replaceAll instead of regex 2023-02-03 17:44:25 +09:00
syuilo 825551d64f drop syslog
Close #9774
2023-02-03 15:08:36 +09:00
syuilo 5859df389f Create 1675404035646-cleanup.js 2023-02-03 15:02:54 +09:00
syuilo 562b02310f drop twitter/github/discord integrations
Close #9775
2023-02-03 15:01:31 +09:00
syuilo 65ed702d87 update deps 2023-02-03 14:44:09 +09:00
syuilo c559a9843f drop hashtag chart 2023-02-03 14:10:14 +09:00
syuilo ed3e035ad6 refactor: use test 2023-02-02 18:18:25 +09:00
syuilo 07f885fea8 refactor 2023-02-02 18:08:34 +09:00
syuilo 2cc98226ca improve RoleService test 2023-02-02 18:06:23 +09:00
syuilo 00e3453ce1 improve role test 2023-02-02 14:28:29 +09:00
syuilo 1f39d1fe26 test: add test of RoleService 2023-02-02 10:26:59 +09:00
syuilo 4b43745e7c fix(test): add @jest/globals 2023-02-02 10:26:29 +09:00
syuilo 4610d8dfe3 refactor: fix type 2023-02-01 20:15:11 +09:00
syuilo fa296efdf6 refactor: fix type 2023-02-01 20:13:22 +09:00
syuilo d9d98f84bf refactor: fix type 2023-02-01 20:12:42 +09:00
tamaina 7c3143b8e5
enhance(backend): enhance SchemaType handling of anyOf (#9762)
* enhance(backend): enhance anyOf handling

* clean up
2023-02-01 20:04:01 +09:00
syuilo 387fcd5c5d refactor: fix type 2023-02-01 17:29:28 +09:00
syuilo ebc6437977 refactor: tweak variable name 2023-02-01 16:24:50 +09:00
Nya Candy 00d28826b9
fix(try): ld signature normalizer (#9758) 2023-01-31 19:37:39 +09:00
syuilo d8f33bc0af update deps 2023-01-27 11:40:18 +09:00
syuilo d37a734379 fix(server): fix aggregation of retention 2023-01-27 11:10:37 +09:00
syuilo 7cb13cf839 proxyRemoteFilesがfalseならリモートカスタム絵文字は直リンにする 2023-01-26 18:44:43 +09:00
hayabusa b21064ffa4
リアクション履歴が公開なら、ログインしていなくても表示できるように (#9728) 2023-01-26 16:10:32 +09:00
tamaina 4735ae6451
refactor: /proxyをFileServerServiceに統合し、/proxyのurlで/filesが指定されていた場合は直接ファイルを解決するようにする (#9709)
* wip?

* clean up

* Implement? HttpFetchService

* ✌️

* remove node-fetch

* fix

* refactor

* fix

* gateway timeout

* UndiciFetcherクラスを追加 (仮コミット, ビルドもstartもさせていない)

* fix

* add logger and fix url preview

* fix ip check

* enhance logger and error handling

* fix

* fix

* clean up

* Use custom fetcher for ApRequest / ApResolver

* bypassProxyはproxyBypassHostsに判断を委譲するように

* set maxRedirections (default 3, ApRequest/ApResolver: 0)

* fix

* wip????

* wip

* ✌️

* set .node-version

* clean up

* refactor

* clean up

* refactor

* refactor detectRequestType

* rename detectResponseType

* ✌️

* fix

* wip

* clean up

* no got

* remove got

* wip

* ✌️

* fix

* clean up

* remove unnnecessary const

* good cleanup

* no stream

* Revert "no stream"

This reverts commit 636f9192fcd2b17e71bbf6b5b106b490e0f66244.

* fix

* cache-control: max-age=300 to error

* refactor cleanup
2023-01-26 16:06:29 +09:00
syuilo 452bd6db25 tweak custom emoji handling
Close #9721
2023-01-26 15:48:12 +09:00
syuilo f5d6b84381 chore: check emoji host 2023-01-26 14:29:28 +09:00
syuilo d87bb807c3 tweak error screen 2023-01-26 11:39:21 +09:00
syuilo 7131eb1827 fix(server): turnstile-failed: missing-input-secret
Fix #9726
2023-01-26 11:31:43 +09:00
tamaina 605b0f27e4 Merge branch 'develop' into emoji-re 2023-01-25 14:22:26 +00:00
syuilo 5ffa106cc1 サードパーティからも自身のロールを確認できるように
Close #9700
2023-01-25 19:34:10 +09:00
syuilo 3ba5541a66 Update ApResolverService.ts 2023-01-25 12:36:39 +09:00
syuilo 945c50db1f Update ApRequestService.ts 2023-01-25 12:31:03 +09:00
syuilo 30dce42e03 fix deps 2023-01-25 12:17:53 +09:00