Skip to content
Extraits de code Groupes Projets
  1. sept. 28, 2020
  2. sept. 26, 2020
  3. sept. 24, 2020
  4. sept. 23, 2020
  5. sept. 21, 2020
  6. sept. 18, 2020
  7. sept. 16, 2020
  8. sept. 15, 2020
  9. sept. 14, 2020
    • ThibG's avatar
      Add paragraph about browser add-ons when encountering some errors (#14801) · b67caf9b
      ThibG a rédigé
      * Add paragraph about browser add-ons when encountering some errors
      
      When a crash is caused by a NotFoundError exception, add a paragraph
      to the error page mentioning browser add-ons.
      
      Indeed, crashes with NotFoundError are often caused by browser extensions
      messing with the DOM in ways React.JS can't recover from (e.g. issues #13325
      and #14731).
      
      * Reword error messages
      b67caf9b
    • ThibG's avatar
      Do not serve account actors at all in limited federation mode (#14800) · cd4ec7cd
      ThibG a rédigé
      * Do not serve account actors at all in limited federation mode
      
      When an account is fetched without a signature from an allowed instance,
      return an error.
      
      This isn't really an improvement in security, as the only information that was
      previously returned was required protocol-level info, and the only personal bit
      was the existence of the account. The existence of the account can still be
      checked by issuing a webfinger query, as those are accepted without signatures.
      
      However, this change makes it so that unallowed instances won't create account
      records on their end when they find a reference to an unknown account.
      
      The previous behavior of rendering a limited list of fields, instead of not
      rendering the actor at all, was in order to prevent situations in which two
      instances in Authorized Fetch mode or Limited Federation mode would fail to
      reach each other because resolving an account would require a signed query…
      from an account which can only be fetched with a signed query itself. However,
      this should now be fine as fetching accounts is done by signing on behalf of
      the special instance actor, which does not require any kind of valid signature
      to be fetched.
      
      * Fix tests
      cd4ec7cd
  10. sept. 13, 2020
  11. sept. 12, 2020
  12. sept. 11, 2020
  13. sept. 10, 2020
  14. sept. 09, 2020
  15. sept. 08, 2020
  16. sept. 07, 2020
  17. sept. 04, 2020
  18. sept. 02, 2020
  19. sept. 01, 2020
  20. août 31, 2020
  21. août 30, 2020
Chargement en cours