James Smith ea6ada9617 Disable CSRF protection for omniauth callbacks ...

Just isn't needed there, probably should have always been off.

2025-11-28 09:08:08 +00:00

..

api/v0

update API spec with new ordering option

2025-11-05 10:34:12 +00:00

assets

add javascript to reveal hidden copyable text

2025-11-26 14:11:43 +00:00

components

sanitize image URL

2025-11-27 15:58:19 +00:00

controllers

Disable CSRF protection for omniauth callbacks

2025-11-28 09:08:08 +00:00

deserializers

Only let owners and moderators set permissions

2025-11-25 16:21:58 +00:00

helpers

Add explicit sanitization to fields that come in from the Fediverse

2025-11-27 15:51:25 +00:00

javascript

add javascript to reveal hidden copyable text

2025-11-26 14:11:43 +00:00

jobs

fix bug where "empty" models reappeared on scan if non-indexable files were uploaded

2025-11-07 00:13:41 +00:00

lib

Add CLI command to remove links matching particular domain or substring

2025-11-02 14:51:16 +00:00

mailers

send modmail to all moderators

2025-03-25 21:40:08 +00:00

models

OIDC: Don't match accounts by unverified emails

2025-11-26 15:40:18 +00:00

policies

Add separate download permission to policy, which prevents it for preview perms

2025-11-18 11:14:27 +00:00

serializers

include banner in activitypub responses

2025-09-24 17:16:32 +01:00

services

move creator filtering into filterservice, and apply owner filter

2025-11-04 15:27:45 +00:00

uploaders

Use assimp library directly rather than calling the binary

2025-10-02 16:28:12 +01:00

validators

fix MySQL case sensitive match in validation

2025-09-19 22:06:40 +01:00

views

Add explicit sanitization to fields that come in from the Fediverse

2025-11-27 15:51:25 +00:00