wamo/gnu-social
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity
GNU social is a social communication software used in federated social networks. It is widely supported and has a large user base. It is already used by the Free Software Foundation. https://docs.gnusocial.rocks/ https://codeberg.org/GNUsocial/gnu-social
20,823 Commits 8 Branches 0 Tags 330 MiB
PHP 88.9%
Twig 7.4%
CSS 2.3%
Shell 0.8%
Makefile 0.3%
Other 0.2%
aef1fac536
Go to file
Hugo Sales aef1fac536
[SECURITY] Refactor security hardening code and disable unused stream wrappers 
Ensure unwanted enviorment variables are removed from the actual
global environment rather than just the `$_ENV` superglobal variable

Disable stream wrappers, as this is an unexpected feature for most
developers and can be exploited. For instance, `phar://` can be used
to override any class and thus provide code execution (through
`__wakeup` or `__costruct`, for instance). Not a complete solution, as
`php://` can also be abused, but we can't disable it as it gets used
_somewhere_ in our dependencies
2022-04-03 18:02:54 +01:00
bin [TOOLS][PLUGINS][OAuth2] Add mechanism to allow plugins to have an install script. Add script for generating keys for OAuth 2022-02-28 15:47:32 +00:00
components [ENTITY][Actor][COMPONENT][Tag] Add Actor->getNoteTags(?string $note_type) which gets a cached list of NoteTags for notes of type $note_type for the actor 2022-04-01 00:11:01 +01:00
config [CORE][Router] Rename \App\Core\Router\Router to \App\Core\Router and merge \App\Core\Router\RouteLoader with \App\Core\Router 2022-03-28 20:59:15 +01:00
docker [TESTS] Load languages prior to remaining fixtures 2022-03-19 22:18:00 +00:00
docs [CSS] .section-widget class and derivatives replaced as .frame-section, since a widget implies a simple element with a specific function 2022-01-21 22:05:33 +00:00
DOCUMENTATION [UI][CONTROLLER][ENTITY][DOCS] Refactor term 'timeline' into 'feed' 2021-11-26 13:05:23 +00:00
extlib [TOOLS][COMPONENTS][CORE] Ran cs-fixer on all files 2022-01-30 16:41:54 +00:00
plugins [PLUGIN][Pinboard] For tag list request, respond with the most common variant and the corresponding count for each canon tag 2022-04-01 02:10:12 +01:00
public [SECURITY] Refactor security hardening code and disable unused stream wrappers 2022-04-03 18:02:54 +01:00
scripts [TOOLS][CS-FIXER] Run new PHP CS Fixer config. Notably, adds strict_types 2021-10-27 04:19:28 +01:00
src [SECURITY] Refactor security hardening code and disable unused stream wrappers 2022-04-03 18:02:54 +01:00
templates [COMPONENT][Person][TEMPLATES] Move persosn settings template from core to the component 2022-03-31 03:29:31 +01:00
tests [CORE][Entity] Rename createOrUpdate to 'checkExistingAndCreateOrUpdate', remove update feature from 'create' and add 'createOrUpdate' and fix users 2022-03-28 20:59:15 +01:00
translations [I18N] Remove incomplete autogenerated translation file, to be fixed later 2021-09-14 13:05:42 +01:00
.dir-locals.el [TOOLS][PHPStan] Make a standalone phpstan executable, which executes inside the docker container 2021-10-27 04:19:31 +01:00
.env [QUEUE] Add queueing wrapper, default configuration and example usage 2021-09-14 13:05:33 +01:00
.env.test [TOOLS][TESTS] Ensure database schema is up to date in tests 2022-03-13 14:22:18 +00:00
.gitignore [TOOLS] Update PHP CS fixer and adjust configuration 2021-10-27 04:19:27 +01:00
.php-cs-fixer.php [TOOLS][CS-FIXER] Fix incorrect transformation 2021-10-27 04:19:28 +01:00
composer.json [TESTS][MODULES] Move Test Fixtures to tests/fixtures folder and add support for loading fixtures from components and plugins 2022-03-13 18:00:21 +00:00
composer.lock [DEPENDENCIES] Update dependencies 2022-03-28 20:59:15 +01:00
CREDITS.md [DOCUMENTATION] Document All The Things! 2021-09-14 13:04:33 +01:00
docker-compose.yaml.default [DOCKER] Update configuration script to include the worker container 2021-12-20 20:39:54 +00:00
INSTALL.md [DOCUMENTATION] Add documentation on installing with Docker 2021-09-14 13:10:21 +01:00
Makefile [COMPONENT][Group][Entity] Useless URI column removed 2022-03-09 01:40:34 +00:00
phpstan.neon [TOOLS][PHPStan] Ignore errors due to lack of namespace in CodeCeption acceptance tester 2022-01-21 21:03:06 +00:00
phpunit.xml.dist [TESTS] Add support for loading test suites from plugins and components 2022-03-09 01:37:11 +00:00
social.yaml [PLUGIN][Pinboard] Implement token authentication and settings page, allowing the user to enable, disable, refresh or consult their token 2022-03-31 03:29:31 +01:00
symfony.lock [DEPENDENCIES] Move from Symfony 5.4 to 6 and update all other packages, where applicable 2022-03-09 20:51:42 +00:00