Commit Graph

5015 Commits

Author SHA1 Message Date
evazion
01afc46f74 Fix failures in commenting tests.
Restricting users from upvoting their own comments broke some tests.
Switch these tests to downvoting instead.
2016-12-03 20:06:50 -06:00
Albert Yi
4f2988c809 ignore config/newrelic.yml 2016-12-02 15:09:06 -08:00
Albert Yi
9e164cafae add cap task for updating newrelic on deployments 2016-12-02 15:06:36 -08:00
Albert Yi
1314239326 remove coinbase references 2016-12-02 13:52:39 -08:00
Albert Yi
6e27d06eee link to performance reports in site map 2016-12-02 13:31:05 -08:00
Albert Yi
d7c4c1f714 fix references to https for listbooru 2016-12-02 13:28:13 -08:00
Albert Yi
7aab50f726 remove old iqdb code 2016-12-02 13:21:56 -08:00
Albert Yi
8e5331d234 fix for iqdb queries 2016-12-02 13:11:10 -08:00
Albert Yi
a358247c1c fix for iqdb download 2016-12-02 12:19:42 -08:00
Albert Yi
af42f52d4a fix references to report_server 2016-12-01 12:34:57 -08:00
Albert Yi
f46aaad39d additional fixes to support iqdbs 2016-12-01 12:22:34 -08:00
Albert Yi
73ff94e920 integrate iqdbs 2016-11-30 16:38:00 -08:00
Albert Yi
ebedea99c1 fix urls for iqdb service 2016-11-30 15:20:26 -08:00
Albert Yi
e7907e0e14 rename some config keys to clarify what they are 2016-11-28 17:31:01 -08:00
Albert Yi
428d4689d6 stub in support for iqdbs 2016-11-28 17:14:25 -08:00
Albert Yi
17604a6147 remove dockerfile 2016-11-28 16:49:43 -08:00
Albert Yi
8ccc7c2251 Merge pull request #2777 from evazion/feat-normalize-yandere-sources
Normalize yande.re sources from image URL -> html page URL.
2016-11-28 12:03:40 -08:00
Albert Yi
5c761d4a60 Merge pull request #2775 from evazion/fix-user-feedbacks
Prevent mods from editing/deleting feedbacks given to themselves.
2016-11-28 12:02:47 -08:00
Albert Yi
4c0e44806c Merge pull request #2774 from evazion/fix-2771
Fix #2771: Approving deleted image doesn't create mod action.
2016-11-28 11:56:40 -08:00
Albert Yi
eb66ec9d21 Merge pull request #2773 from evazion/fix-2772
Fix #2772: Topics set as mod+ can't be reverted to public ones.
2016-11-28 11:55:45 -08:00
Albert Yi
3f83d73c7d Merge pull request #2768 from evazion/feat-notices-in-wiki
Pull upload/flag notices from wiki pages.
2016-11-28 11:51:53 -08:00
Albert Yi
a4ff39da8e Merge pull request #2765 from evazion/fix-pool-order-safe-mode
Don't display hidden posts on pool/favgroups order pages (fix #2762).
2016-11-28 11:50:44 -08:00
Albert Yi
c5bb71a3f3 Merge pull request #2763 from evazion/fix-image-board-sources
Don't clobber image board sources.
2016-11-28 11:45:03 -08:00
evazion
1cce721114 Fix #2772: Topics set as mod+ can't be reverted to public ones. 2016-11-28 05:50:46 -06:00
evazion
f9aeb875db Normalize yande.re sources from image URL -> html page URL. 2016-11-28 05:04:02 -06:00
evazion
fa74c71b6d Prevent mods from editing/deleting feedbacks given to themselves. 2016-11-28 03:57:24 -06:00
evazion
bba080a4c5 Test mod deletion of user feedbacks. 2016-11-28 03:57:23 -06:00
evazion
0697af6d23 Fix #2771: Approving deleted image doesn't create mod action. 2016-11-28 02:50:07 -06:00
evazion
daf1324ab2 Refactor available_min_user_levels to view helper. 2016-11-28 01:36:59 -06:00
evazion
1d3ec05348 Fix nil exception on if help:upload_notice doesn't exist. 2016-11-21 01:40:37 -06:00
evazion
961fb94adf Pull flag notice from help:flag_notice wiki page (fix #2767). 2016-11-21 01:30:01 -06:00
evazion
5909e8501c Pull upload notice, bookmarklet notice from help:upload_notice wiki page. 2016-11-21 01:17:15 -06:00
evazion
12dd0f3a48 Pool/favgroup orders: include post id in hidden post placeholder.
This is so hidden posts are distinguishable from one another.
2016-11-20 06:21:51 +00:00
evazion
f073e14574 Don't display hidden posts on pool/favgroups order pages (fix #2762). 2016-11-20 06:06:29 +00:00
evazion
3eafc5ae6a Don't clobber image board sources. 2016-11-19 02:29:33 -06:00
Albert Yi
77e06b6c08 increase unicorn backlog 2016-11-18 16:40:55 -08:00
Albert Yi
67c374f272 fix relative links in at mentions 2016-11-18 11:42:49 -08:00
Albert Yi
0b9c1e1156 Merge pull request #2759 from evazion/fix-dmail-filters
Don't filter dmails from moderators; fix dmail filter exploit.
2016-11-14 16:27:17 -08:00
Albert Yi
536ba3c7ee fixes #2756: Have @Mentions Use Relative Instead of Absolute Links 2016-11-14 10:15:11 -08:00
evazion
47f663e002 Don't filter dmails from moderators (fix #2757). 2016-11-12 01:11:40 -06:00
evazion
b0a0a32173 API: support PUT /maintenance/user/dmail_filter.json. 2016-11-12 01:10:14 -06:00
evazion
a16b91e2bf Fix exploit allowing dmail filters to be set on other users.
Exploit:

    curl \
      -u $USERNAME:$API_KEY \
      -X PUT "http://danbooru.donmai.us/maintenance/user/dmail_filter.json?dmail_id=1" \
      -d "dmail_filter[words]=owned&dmail_filter[user_id]=2"

...where dmail_id is any dmail you own (doesn't matter which) and user_id is the victim.
2016-11-12 01:10:14 -06:00
evazion
2dadad395b Add test for setting dmail filters on other people. 2016-11-12 01:10:14 -06:00
Albert Yi
30899b7d3b Merge pull request #2753 from evazion/feat-autotag-cosplay
Autotag character_(cosplay) -> character, cosplay.
2016-11-11 16:48:30 -08:00
Albert Yi
ed6b48b0bc Merge pull request #2754 from evazion/fix-comment-selfvotes
Prevent users from upvoting their own comments.
2016-11-11 16:46:50 -08:00
Albert Yi
4f26d97d6a tweak unicorn config 2016-11-07 15:24:52 -08:00
Albert Yi
c075b011b6 upgrade unicorn version 2016-11-07 15:00:28 -08:00
Albert Yi
cbc96a6c03 re-enable preload app on unicorn 2016-11-07 10:52:07 -08:00
Albert Yi
eb6746a8a8 additional checks on forum topic visibility 2016-11-07 10:48:04 -08:00
Albert Yi
a22a7c3302 bulk revert 2016-11-07 10:48:04 -08:00