Kevin Wallace
9db7bdf0fb
remote follow: use HTML redirect to work around CSP issue
...
In Chrome, I get the following when trying to use the remote follow form:
Refused to send form data to 'https://example.com/remote_follow '
because it violates the following Content Security Policy directive:
"form-action 'self'".
It seems some browsers (but notably not Firefox) apply the form-action
policy to the redirect target in addition to the initial form
submission endpoint. See:
https://github.com/w3c/webappsec-csp/issues/8
In that thread, this workaround is suggested.
2022-11-13 17:11:02 +01:00
Thomas Sileo
793a939046
Fix OG metadata scraping and improve workers
2022-11-13 13:00:22 +01:00
Thomas Sileo
c3eb44add7
Improve mention parsing
2022-11-12 10:04:37 +01:00
Thomas Sileo
9b75020c91
Fix for profile image URL support
2022-11-12 09:26:28 +01:00
Thomas Sileo
36a1a6bd9c
Fix for processing objects from Birdsite LIVE
2022-11-12 09:01:56 +01:00
Thomas Sileo
164cd9bd00
Webfinger strips extra space
2022-11-11 15:25:55 +01:00
Thomas Sileo
698a2bae11
Follow up fixes for the image URL support
2022-11-11 15:13:45 +01:00
Alexey Shpakovsky
4613997fe3
Add option to set image_url ("background image") for user
...
While this option is not used anywhere in microblog.pub itself, some
other servers do occasionally use it when showing remote profiles.
Also, this image _can_ be used in microblog.pub - just add this:
<img src="{{ local_actor.image_url }}">
in the appropriate place of your template!
2022-11-11 15:08:17 +01:00
Thomas Sileo
4c995957a6
Merge branch 'test-css-tweak' into v2
2022-11-11 15:07:40 +01:00
Thomas Sileo
5c98b8dbfb
Revert "Minor styling tweaks: piccalil.li's modern CSS Reset swyx.io's 100 Bytes of CSS to look great everywhere"
...
This reverts commit a339ff93b1
2022-11-11 15:07:18 +01:00
Thomas Sileo
48d5914851
Tweak orientation hint for attachments
2022-11-11 14:56:56 +01:00
Ash McAllan
8f00e522d7
pass through width and height of attachments to allow styling based on media orientation
2022-11-11 14:20:59 +01:00
Thomas Sileo
62c9327500
Add support for setting a custom CSP
2022-11-09 21:26:43 +01:00
Cassio Zen
a339ff93b1
Minor styling tweaks: piccalil.li's modern CSS Reset swyx.io's 100 Bytes of CSS to look great everywhere
2022-11-09 20:39:27 +01:00
Thomas Sileo
afd253a1b4
Fix OG image URL
2022-11-09 09:29:25 +01:00
Thomas Sileo
509e10e79b
Fix active URL in the navbar
2022-11-09 08:15:29 +01:00
Thomas Sileo
d96ec913d4
Add support for displaying events from Mobilizon
2022-11-07 20:35:23 +01:00
Thomas Sileo
5b505b0e37
Update deps
2022-11-07 18:53:52 +01:00
Thomas Sileo
530491ff10
Fix typing
2022-11-07 18:53:45 +01:00
Kevin Wallace
48740ea8cb
Allow templates to be overridden in data/templates/
...
I'd like to customize my instance's theme beyond what's possible with
_theme.scss. This patch would allow me to do that, and keep my changes
self-contained in data/ without maintaining a local patchset over
app/templates/.
For utils.html, I've also added scoped blocks around the body of every
macro. This allows the macros to be overridden individually in
data/templates/utils.html, without copying the whole file. For example,
to only override the display of a specific actor's name/icon:
{% extends "app/utils.html" %}
{% block display_actor %}
{% if actor.ap_id == "https://me.example.com " %}
<!-- custom actor display -->
{% else %}
{{ super() }}
{% endif %}
{% endblock %}
2022-11-07 18:46:21 +01:00
Thomas Sileo
0d7c121781
Fix formatting
2022-11-06 16:57:04 +01:00
Kevin Wallace
a4cfd65009
Sign media URLs to avoid becoming an open proxy
...
Signatures are valid for ~1 week.
2022-11-04 19:36:26 +01:00
Thomas Sileo
540b9d1470
Minor tweaks about non-root handling
2022-11-04 19:28:21 +01:00
Kevin Wallace
1c076049cf
Fix URL generation when not at domain root
2022-11-04 19:22:30 +01:00
Kevin Wallace
242bf7b515
fixup! Fix URL generation when not at domain root
...
Oops -- missed these two! Sorry for the noise; let me know if you'd
like me to squash and resubmit.
2022-11-04 19:22:30 +01:00
Kevin Wallace
2843155501
Allow actor id to be specified in config
...
This is useful if the actor won't be at the root of the domain.
2022-11-04 19:22:30 +01:00
Thomas Sileo
0badf0bc1f
Fix permalink for Questions
2022-11-03 22:38:29 +01:00
Thomas Sileo
32692a7dcd
First shot at supporting custom handler
2022-11-02 08:51:21 +01:00
Thomas Sileo
817dd98c5c
Update deps
2022-11-01 19:11:47 +01:00
Thomas Sileo
b6f0cd01d3
Less HTML restrictions for local content
2022-10-30 18:47:24 +01:00
Thomas Sileo
c985dd84c3
Add slugify helper
2022-10-30 17:51:57 +01:00
Thomas Sileo
3d049da2e5
Add slug support for Article
2022-10-30 17:50:59 +01:00
Thomas Sileo
fd5293a05c
Fix password reset task
2022-10-23 16:40:56 +02:00
Thomas Sileo
3729500e3e
Improve Block support
2022-10-23 16:37:32 +02:00
Thomas Sileo
2853bf2a28
Fix tag dedup
2022-10-20 19:39:55 +02:00
Thomas Sileo
0144a1c0d4
Tweak Mistletoe autolink
2022-10-19 21:09:30 +02:00
Thomas Sileo
d93bcf6128
Complete the switch to mistletoe
2022-10-19 20:46:01 +02:00
Josh Washburne
647add2bab
Added the ability to use a custom favicon.
2022-10-19 09:03:58 +02:00
Thomas Sileo
f50a233ce9
Improved Block support
2022-10-18 21:39:09 +02:00
Thomas Sileo
d909bf93a0
Tweak/fix install steps in the docs
2022-10-18 19:26:04 +02:00
Thomas Sileo
8e7fbcc501
Tweak actor refresh
2022-10-11 20:49:06 +02:00
Thomas Sileo
7a665df2b5
Tweak README
2022-10-10 11:05:36 +02:00
Thomas Sileo
b5b56e9ed5
More actor refresh improvements
2022-10-09 11:36:00 +02:00
Thomas Sileo
9a36b0edf5
Fix conversation processing
2022-10-07 19:50:14 +02:00
Thomas Sileo
20f996d165
Tweak HTTP sig handling
2022-10-07 19:00:18 +02:00
Thomas Sileo
602da69083
Support actor refresh while checking HTTP sig
2022-10-07 12:05:28 +02:00
Thomas Sileo
f6cfe06f66
Force refresh actor once in a while
2022-10-07 08:55:05 +02:00
Thomas Sileo
c8a9793638
Make hashtag case insensitive
2022-10-05 20:27:21 +02:00
Thomas Sileo
5eaa0f291b
More Markdown improvements
2022-10-05 20:05:16 +02:00
Thomas Sileo
881d0ad899
Switch Markdown parser
2022-10-04 20:26:01 +02:00
