Diffusion WriteFreely b8c7e1901a30

Merge dc19f9cfa9e6f4fb41713f8f3e4d812122fd8df0 into…
b8c7e1901a30Unpublished
Actions

Unpublished Commit · Learn More

Not On Permanent Ref: This commit is not an ancestor of any permanent ref.

This commit has been deleted in the repository: it is no longer reachable from any branch, tag, or ref.

Description

Merge dc19f9cfa9e6f4fb41713f8f3e4d812122fd8df0 into 53419b5349da748069ac906cdeec4c52746110cd

Details

Provenance

Nikhil Ranka <35439798+ranka23@users.noreply.github.com>	Authored on Aug 27 2026, 6:06 AM
GitHub <noreply@github.com>	Committed on Aug 27 2026, 6:06 AM

Parents

rWFdc19f9cfa9e6: fix: prevent nil pointer dereference in initActivityPub
rWF53419b5349da: Merge branch 'develop'

Branches

Unknown

Tags

Unknown

Event Timeline

Merged Changes

This commit merges a very large number of changes. Only the first 50 are shown.

dc19f9cfa9e6 fix: prevent nil pointer dereference in initActivityPub
Author
Nikhil Ranka <nikhilranka23@gmail.com>
Browse Repository
No Builds
No Audits
71d6410b0e28 Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
7fb71bc17918 Prevent access to private / password-protected blogs via ActivityPub
Author
matt
Browse Repository
No Builds
No Audits
3efbc692750e Merge pull request #1738 from c7io-dev/fix-customize-username-shadow
Author
matt
Browse Repository
No Builds
No Audits
ec745e3ffdc4 Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
2c6c02405a00 Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
5110ba343ed1 Merge pull request #1730 from writefreely/fix-uppercase-usernames
Author
matt
Browse Repository
No Builds
No Audits
e9ec650611a2 Merge pull request #1727 from writefreely/fix-password-protected
Author
matt
Browse Repository
No Builds
No Audits
47488e93fa13 Merge pull request #1729 from writefreely/fedi-image-description
Author
matt
Browse Repository
No Builds
No Audits
2681d08da9a5 Fix shadowed .Username on collection customize page
Author
sNullp <snullp@bsql.me>
Browse Repository
No Builds
No Audits
aa0143148ebc Merge pull request #1712 from writefreely/dependabot/github_actions/docker/logi…
Author
matt
Browse Repository
No Builds
No Audits
130d1cb33307 Merge pull request #1714 from writefreely/dependabot/go_modules/github.
Author
matt
Browse Repository
No Builds
No Audits
9161903645cf Add tests for normalizing usernames via OAuth
Author
matt
Browse Repository
No Builds
No Audits
224159b9213f Normalize usernames for signups through OAuth
Author
matt
Browse Repository
No Builds
No Audits
790cb054273f Add tests for Markdown alt text extraction
Author
matt
Browse Repository
No Builds
No Audits
e67905a484d2 Include image alt text in fediverse attachment data
Author
matt
Browse Repository
No Builds
No Audits
c4d0ac637350 Fix password-protected blogs not unlocking after cookie expires
Author
matt
Browse Repository
No Builds
No Audits
e01f7d046d4c Revert webfinger changes
Author
matt
Browse Repository
No Builds
No Audits
3e56d3ab17bb Prevent SSRF via ActivityPub inbox actor/object IRI resolution
Author
matt
Browse Repository
No Builds
No Audits
36dd733586ea Block SSRF in webfinger RemoteLookup
Author
matt
Browse Repository
No Builds
No Audits
f19786fb328d Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
689f52b3a9ba Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
477d0de4e893 Ensure only blog owner can pin a blog's posts
Author
matt
Browse Repository
No Builds
No Audits
5c86486101a2 Merge commit from fork
Author
matt
Browse Repository
No Builds
No Audits
dec1269fd8a6 Merge branch 'develop' into advisory-fix-1
Author
matt
Browse Repository
No Builds
No Audits
48083e08a796 Fix CSRF vulnerability (GHSA-mp2f-3fq8-r9vj) on /me endpoints
Author
matt
Browse Repository
No Builds
No Audits
acdc6b9ea4a6 Merge pull request #1725 from writefreely/add-tests
Author
matt
Browse Repository
No Builds
No Audits
019692100a8e Merge pull request #1726 from writefreely/fix-icons
Author
matt
Browse Repository
No Builds
No Audits
840e9a49b271 Bump version to 0.17.2
Author
matt
Browse Repository
No Builds
No Audits
3a9aa294c673 Remove unused Material Icon font files
Author
matt
Browse Repository
No Builds
No Audits
5b5eda9017f1 Fix icons for Safari and small icons in Chrome
Author
matt
Browse Repository
No Builds
No Audits
a1da2967bc9d Remove outdated goreportcard.com badge from README
Author
matt
Browse Repository
No Builds
No Audits
407442a4ea56 Add template rendering tests for /me pages
Author
matt
Browse Repository
No Builds
No Audits
8a5150483c61 Add tests for the mailer pkg
Author
matt
Browse Repository
No Builds
No Audits
01295b93aee0 Add tests around signing up
Author
matt
Browse Repository
No Builds
No Audits
39e1ec0e02df Merge pull request #1720 from writefreely/fix-post-signature-dupe
Author
matt
Browse Repository
No Builds
No Audits
8238590538ff Merge pull request #1721 from writefreely/fix-smtp-sending
Author
matt
Browse Repository
No Builds
No Audits
afef135bc129 Merge pull request #1724 from writefreely/fix-unvalidated-invite-signups
Author
matt
Browse Repository
No Builds
No Audits
bbf2341681c7 Return applicable error for expired invite links on /auth/signup
Author
matt
Browse Repository
No Builds
No Audits
d6e6325c9a71 Merge pull request #1719 from writefreely/fix-chorus-post-page
Author
matt
Browse Repository
No Builds
No Audits
0fe456b16ac7 Validate invite codes on /auth/signup with closed registrations
Author
sNullp <snullp@bsql.me>
Browse Repository
No Builds
No Audits
08215d1614e4 Fix unquoted From address and phantom recipient in mailer
Author
matt
Browse Repository
No Builds
No Audits
155aa616e19a Strip HTML from post titles in `Post.PlainDisplayTitle`
Author
matt
Browse Repository
No Builds
No Audits
d26954b04897 Ensure posts never duplicate signature in ActivityPub data
Author
matt
Browse Repository
No Builds
No Audits
10ca8b4ee13d Fix collection / post rendering in Chorus mode
Author
matt
Browse Repository
No Builds
No Audits
c47a08957772 Merge pull request #1679 from mpldr-pulls/develop
Author
matt
Browse Repository
No Builds
No Audits
3eb3e67d8353 Bump github.com/writeas/web-core from 1.7.0 to 1.8.0
Author
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Browse Repository
No Builds
No Audits
76eebbae1d4b Merge pull request #1715 from writefreely/dependabot/go_modules/golang.
Author
matt
Browse Repository
No Builds
No Audits
a6a99f8deacd Bump golang.org/x/net from 0.56.0 to 0.57.0
Author
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Browse Repository
No Builds
No Audits
cfa318ce7a9a Bump docker/login-action from 4.3.0 to 4.6.0
Author
dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Browse Repository
No Builds
No Audits

Changes (33)

Path

Size

.github/

workflows/

config/

less/

mailer/

static/

fonts/

MaterialIcons-Regular.eot

MaterialIcons-Regular.svg

MaterialIcons-Regular.ttf

template_render_test.go

templates/

user/

rWFb8c7e1901a30

View Options

.github/workflows/docker-publish.yml

View Options

README.md

View Options

account.go

View Options

account_import.go

View Options

activitypub.go

View Options

app.go

View Options

collections.go

View Options

config/config.go

View Options

database.go

View Options

email.go

View Options

go.mod

View Options

go.sum

View Options

invites.go

View Options

less/icons.less

View Options

mailer/mailer.go

View Options

mailer/mailer_test.go

View Options

oauth_generic.go

View Options

oauth_signup.go

View Options

postrender.go

View Options

posts.go

View Options

posts_test.go

View Options

routes.go

View Options

signup_test.go

View Options

static/fonts/MaterialIcons-Regular.eot

View Options

static/fonts/MaterialIcons-Regular.svg

View Options

static/fonts/MaterialIcons-Regular.ttf

View Options

template_render_test.go

View Options

templates/user/collection.tmpl

View Options

templates/user/import.tmpl

View Options

templates/user/invite.tmpl

View Options

templates/user/settings.tmpl

View Options

unregisteredusers.go

View Options

Merge dc19f9cfa9e6f4fb41713f8f3e4d812122fd8df0 into…b8c7e1901a30UnpublishedActions

Unpublished Commit · Learn More

Description

Details

Event Timeline

Merged Changes

Changes (33)

rWFb8c7e1901a30

.github/workflows/docker-publish.yml

README.md

account.go

account_import.go

activitypub.go

app.go

collections.go

config/config.go

database.go

email.go

go.mod

go.sum

invites.go

less/icons.less

mailer/mailer.go

mailer/mailer_test.go

oauth_generic.go

oauth_signup.go

postrender.go

posts.go

posts_test.go

routes.go

signup_test.go

static/fonts/MaterialIcons-Regular.eot

static/fonts/MaterialIcons-Regular.svg

static/fonts/MaterialIcons-Regular.ttf

template_render_test.go

templates/user/collection.tmpl

templates/user/import.tmpl

templates/user/invite.tmpl

templates/user/settings.tmpl

unregisteredusers.go

webfinger.go

Merge dc19f9cfa9e6f4fb41713f8f3e4d812122fd8df0 into…
b8c7e1901a30Unpublished
Actions