Dennis Schubert 507da63010 Do not let our OpenID Connect client registration handler connect to local networks. ...

This was originally reported by @offensiveee, and while the report came in as a bunch of lowest-possible-effort GenAI slop disclosures, the underlying issue is valid.

Reviewed off-channel by @SuperTux88.

2026-04-07 20:26:02 +02:00

..

api/openid_connect

Do not let our OpenID Connect client registration handler connect to local networks.

2026-04-07 20:26:02 +02:00

notifications

Add notifications for likes on comments

2023-11-13 02:27:55 +01:00

services

Fixed test

2021-06-13 01:26:27 +02:00

user

Fix participations for likes on comments in the backend

2023-11-13 02:27:55 +01:00

account_deletion.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

account_migration.rb

Migration Backend Part

2021-11-23 01:48:32 +01:00

application_record.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

aspect_membership.rb

Check for user existence on aspect membership destruction

2017-10-17 01:38:36 +02:00

aspect_visibility.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

aspect.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

block.rb

Fix deprecation warnings for rails 6.1

2022-07-20 21:27:41 +02:00

comment_signature.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

comment.rb

Allow fetching comments

2024-01-21 23:30:51 +01:00

contact.rb

Remove contacts page on profiles

2018-04-12 01:40:49 +02:00

conversation_visibility.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

conversation.rb

API: Add endpoint to toggle conversation read status

2020-11-30 18:03:38 +01:00

invitation_code.rb

Fix deprecation warnings for rails 6.0

2022-07-20 21:26:58 +02:00

like_signature.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

like.rb

Fix participations for likes on comments in the backend

2023-11-13 02:27:55 +01:00

location.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

mention.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

message.rb

Fix deprecation warnings for rails 6.1

2022-07-20 21:27:41 +02:00

notification_actor.rb

Delete people with invalid diaspora IDs (friendica with path)

2017-10-17 01:23:47 +02:00

notification.rb

Notifications API Endpoint and unit test complete

2018-12-30 22:33:04 +01:00

o_embed_cache.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

open_graph_cache.rb

Pass normalized URI to OpenGraphReader

2019-05-24 22:43:08 +02:00

participation.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

person.rb

Merge branch 'next-minor' into develop

2021-10-25 03:46:48 +02:00

photo.rb

Always strip exif data and drop user setting for it

2023-06-04 04:25:01 +02:00

pod.rb

Ensure pod urls are always lowercase

2022-10-31 01:45:13 +01:00

poll_answer.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

poll_participation_signature.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

poll_participation.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

poll.rb

Implement archive import backend

2019-04-26 18:41:27 +03:00

post.rb

Fixing robocop

2021-04-18 13:25:50 +02:00

profile.rb

Merge branch 'next-minor' into develop

2020-06-13 23:31:09 +02:00

reference.rb

Add LinksController

2018-07-11 01:24:28 +02:00

report.rb

Fix deprecation warnings for rails 6.1

2022-07-20 21:27:41 +02:00

reshare.rb

Fix deprecation warnings for rails 6.1

2022-07-20 21:27:41 +02:00

role.rb

Add the ability to assign roles in the admin panel

2018-10-14 06:03:06 +02:00

service.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

share_visibility.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

signature_order.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

status_message.rb

Merge branch 'next-minor' into develop

2022-07-20 21:34:39 +02:00

tag_following.rb

Add # frozen_string_literal: true to all files

2017-09-17 19:29:15 +02:00

user_preference.rb

Add notifications for likes on comments

2023-11-13 02:27:55 +01:00

user.rb

Always strip exif data and drop user setting for it

2023-06-04 04:25:01 +02:00