mastodon/app
Claire 502cf75b16
Merge pull request from GHSA-58x8-3qxw-6hm7
* Fix insufficient permission checking for public timeline endpoints

Note that this changes unauthenticated access failure code from 401 to 422

* Add more tests for public timelines

* Require user token in `/api/v1/statuses/:id/translate` and `/api/v1/scheduled_statuses`
2024-07-04 16:26:49 +02:00
..
chewy Clamp dates when serializing to Elasticsearch API (#28081) 2023-11-27 13:25:54 +00:00
controllers Merge pull request from GHSA-58x8-3qxw-6hm7 2024-07-04 16:26:49 +02:00
helpers Fix `Style/ClassEqualityComparison` cop (#30058) 2024-06-21 15:33:55 +00:00
javascript New Crowdin Translations (automated) (#30916) 2024-07-04 08:46:27 +00:00
lib Merge pull request from GHSA-vp5r-5pgw-jwqx 2024-07-04 16:11:28 +02:00
mailers Remove duplicate method def `ApplicationHelper#instance_presenter` (#30331) 2024-05-17 08:29:13 +00:00
models Change `author_account` to be `authors` in REST API (#30846) 2024-06-27 13:17:18 +00:00
policies Fix `Rails/WhereRange` cop (#30343) 2024-05-20 09:37:36 +00:00
presenters Fix repetitive database queries from #30040 (#30259) 2024-05-15 09:38:16 +00:00
serializers Change `author_account` to be `authors` in REST API (#30846) 2024-06-27 13:17:18 +00:00
services Catch encoding errors when creating link previews. (#30853) 2024-06-27 14:41:03 +00:00
validators Fix add validation to webpush subscription keys (#30542) 2024-06-05 19:16:47 +00:00
views Drop favicon.ico generation (#30375) 2024-06-26 13:44:08 +00:00
workers Fix: remove broken OAuth Application vacuuming & throttle OAuth Application registrations (#30316) 2024-05-29 14:00:05 +00:00