116 commits

Author	SHA1	Message	Date
byte[]	37adb661fb	display bans in sorted order (fixes philomena-dev/philomena#66)	2020-11-15 21:00:05 -05:00
parasprite	e058a212e7	Removes discourage bans (#65) ... Co-authored-by: Parasprite <foalspeedahead@gmail.com>	2020-11-07 00:22:41 -05:00
byte[]	1436c7ff06	update connecting ip in session	2020-10-12 03:01:20 -04:00
byte[]	a00cdab739	improve ajax error messages	2020-09-27 23:53:14 -04:00
byte[]	fc159c3782	centralize ajax determination	2020-09-27 23:47:32 -04:00
SomewhatDamaged	70959e9094	Damaged limit staff skip (#20) ... * Adds ability to enforce limits on staff * Fix space	2020-09-24 09:36:39 -04:00
byte[]	6a045ce88e	don't bump ratelimit after unsuccessful attempts	2020-09-14 20:52:02 -04:00
byte[]	6deab827ac	store filter_id in a long-lived cookie (derpibooru/philomena#139)	2020-09-14 20:02:43 -04:00
liamwhite	653fd0a4af	hCaptcha (#19)	2020-09-12 13:43:16 -04:00
byte[]	ecfe60bcaa	don't recode tag slugs, fixes #18	2020-09-10 11:20:25 -04:00
byte[]	39ce0ae4fd	require http clients to handle errors	2020-09-09 23:12:54 -04:00
byte[]	c9331f61b4	require page number to be positive	2020-09-07 23:19:32 -04:00
byte[]	a2e524b535	remove unnecessary referrer redirects	2020-09-07 00:28:24 -04:00
byte[]	113908f820	allow CSP customization on a per-controller basis	2020-08-23 18:30:58 -04:00
SomewhatDamaged	dec3615da5	Modify limit_plug for use by API (#15)	2020-08-22 12:11:50 -04:00
byte[]	4bfb7d8dd3	always assign advert, even if nil	2020-08-13 17:55:36 -04:00
byte[]	539eb223ff	Fix all but one dialyzer warning	2020-08-11 19:15:32 -04:00
byte[]	02bbf5e2f1	fixes invisible error message for comment rate limit, weird nesting error for tag updates, e.g. derpibooru/philomena#169	2020-08-11 01:14:00 -04:00
byte[]	5b760436a1	ensure CSP plug config happens at runtime, not compile time	2020-08-06 13:27:56 -04:00
byte[]	5532ea4dec	more complete fix for commission and gallery pagination error	2020-08-01 12:42:29 -04:00
liamwhite	98f4166ea8	Replace Pow with generated Phoenix auth (#10)	2020-07-28 16:56:26 -04:00
Byron Mulvogue	b48a07f517	Allow staff to bypass rate limits	2020-07-24 12:51:23 +00:00
byte[]	ad6e055aff	add missing rate limit	2020-07-21 10:50:33 -04:00
byte[]	a36e2d7368	mix format	2020-06-12 13:00:59 -04:00
byte[]	417305e43c	filter fixes	2020-06-06 21:56:07 -04:00
byte[]	9294e54771	Filter updates	2020-06-06 21:03:17 -04:00
byte[]	5dfd8f5b60	ensure CB is assigned	2020-06-03 21:26:38 -04:00
byte[]	ec1a999913	normal uses variance, not sd	2020-06-03 21:18:39 -04:00
byte[]	7160433c33	update methods	2020-06-03 21:10:38 -04:00
byte[]	cc4103fcea	stop spawning off for advert updates	2020-05-27 17:14:22 -04:00
byte[]	7fca37741b	replace use of hackney in scraper with mint	2020-05-20 14:18:13 -04:00
byte[]	a1b8ed9d33	move search, textile, date parser to app namespace	2020-05-07 22:43:40 -04:00
byte[]	1168ba86f6	move IP/FP updaters to web namespace	2020-05-07 22:03:10 -04:00
byte[]	4b86e783ef	you have to halt the plug pipeline explicitly	2020-05-04 03:18:36 -04:00
SomewhatDamaged	3e7ee76fe2	Api create image (#105) ... * added new method (POST) to /api/v1/json/images * Cleaned up debug * added require_authorization plug, fixed up issues with image_controller * make user do work * Fixed inefficient function use * added api fingerprinting * more robust * corrected holdover from merging files	2020-05-01 00:40:57 -04:00
byte[]	63c89d2faf	fix double send on registration	2020-04-18 20:28:01 -04:00
byte[]	e159c01bef	fix broken case clause	2020-04-18 20:25:08 -04:00
Dan Schultzer	051a204d55	Add TOTP support in the invalidation session plug (#87)	2020-04-18 20:19:07 -04:00
Nick	79d8ed8a1c	Prevent compromised passwords from being used (#89) ... * prevent compromised passwords from being used * formatting consistency * run mix format and hardcode api url * more formatting * remove unnecessary string upcase	2020-04-18 20:15:18 -04:00
byte[]	11cac54ba0	mix format	2020-04-11 20:28:28 -04:00
Dan Schultzer	36cbdff953	Fix plug issue (#86)	2020-04-11 19:47:23 -04:00
Dan Schultzer	e5f0e473d9	Add plug to handle invalidated Pow session tokens (#36) ... * Add plug to handle invalidated Pow session tokens * Add token signing * Refactor for tests	2020-04-11 14:54:55 -04:00
Nick	d247e01347	Properly handle failed captchas after XHR post (#85) ... * handle form posts and xhr posts differently on captcha failure * formatting	2020-04-11 14:23:55 -04:00
byte[]	9ea7980e3f	hex upgrades	2020-02-06 17:24:41 -05:00
byte[]	3ac8687c18	allow get-based reverse searching	2020-01-11 13:51:14 -05:00
byte[]	ed44160603	run formatter	2020-01-10 23:20:19 -05:00
byte[]	18798d2e99	ensure the authenticated user is never persisted as a further safeguard against API CSRF	2019-12-24 12:15:30 -05:00
byte[]	b2724c0de8	samesite session	2019-12-23 19:20:24 -05:00
byte[]	20c521e67b	tor plug	2019-12-23 13:57:14 -05:00
byte[]	991cab61bf	Revert "more aggressive preloading" ... This reverts commit 556cd39afd.	2019-12-22 22:13:36 -05:00