Commit Graph
100 Commits
Author SHA1 Message Date
Albert Yi 664a3f02e2 fixes for failed cron maintenance tasks
* update rails scripts for 5.2
* system dmails should be scoped to system
* fix broken url generator in forum notices
2018-04-27 15:01:40 -07:00
Albert Yi 0b20648f1f rename jquery qtip css to scss 2018-04-27 11:41:13 -07:00
Albert Yi e29f73ac31 include top tagger info in post tooltip, add box shadow css 2018-04-26 15:56:42 -07:00
Albert Yi 87f0adfda3 Merge pull request #3655 from r888888888/expire-burs
Implement BUR pruning
2018-04-26 15:43:54 -07:00
Albert Yi f2b525a6d2 Implement forum topic voting and tag change pruning (#3580) 2018-04-26 15:31:06 -07:00
Albert Yi 45fad069d7 Merge branch 'master' of github.com:r888888888/danbooru 2018-04-26 15:30:14 -07:00
Albert Yi eddc789df2 fix js bugs 2018-04-26 15:01:57 -07:00
Albert Yi 95ab227b09 upgrade jquery-ui to 1.12, move to cdn 2018-04-26 14:49:33 -07:00
Albert Yi 990d625ae3 reset unread dmail count when using mark all as read (#3574) 2018-04-26 11:47:07 -07:00
Albert Yi 9aafc344fa Merge pull request #3666 from evazion/fix-3664
Fix #3664: Highlight non-gentags in post tooltip
2018-04-26 11:40:59 -07:00
Albert Yi 8b98e9e009 additional tests to look for causes of incorrect post count on pools (#3667) 2018-04-26 11:14:01 -07:00
Albert Yi 4b6019d6ad fixes #3668 2018-04-26 10:25:24 -07:00
Albert Yi c4a4394ea0 update gems (fixes #3665) 2018-04-25 14:35:52 -07:00
Albert Yi b0a3f574ed fixes #3574 2018-04-25 14:31:11 -07:00
Albert Yi af3404b087 switch to cdnjs for hosted jquery (#3663) 2018-04-24 11:33:06 -07:00
Albert Yi f3e62f43ba Merge pull request #3658 from evazion/fix-3657
Fix #3657: Add improvements to the uploads interface
2018-04-20 16:03:39 -07:00
Albert Yi 503e8adf69 Merge pull request #3524 from evazion/feat-hsts
Fix #3522: Enable HSTS
2018-04-19 09:41:43 -07:00
Albert Yi e9dc4a397e switch to jquery 3.3.1 on cdn 2018-04-17 16:32:50 -07:00
Albert Yi 34d9cc6d57 fixes #3648 2018-04-17 16:28:17 -07:00
Albert Yi 9957c4c0e2 fixes #3644 2018-04-16 16:43:51 -07:00
Albert Yi 1c88587c55 fixes null uid field error for #3645 2018-04-16 16:41:46 -07:00
Albert Yi 97dd0680df remove download query from post file size link 2018-04-16 16:41:46 -07:00
Albert Yi 2f142ab1aa Merge pull request #3643 from evazion/fix-3642
Fix #3642: Issues with sequential pagination
2018-04-16 16:16:22 -07:00
Albert Yi f2adbba241 switch postarchive to use belongs_to_updater (fixes #3629) 2018-04-13 12:29:48 -07:00
Albert Yi 06559c4ae4 fix missing urls in artists (fixes #3632) 2018-04-13 12:25:49 -07:00
Albert Yi 31a9605ecb fix source mapping for deviantart sources on origin-orig subdomain (fixes #3617) 2018-04-13 11:56:03 -07:00
Albert Yi 32025b77d3 remove fav_string from posts api unless user is moderator (fixes #3633) 2018-04-13 11:45:50 -07:00
Albert Yi 19cc8ebf9e fixes #3630 2018-04-12 16:02:41 -07:00
Albert Yi 5546d9e98b fixes #3627 2018-04-12 14:20:02 -07:00
Albert Yi b99600bbbe fixes #3625 2018-04-12 14:12:27 -07:00
Albert Yi c785d00eb6 remove window.console.log 2018-04-12 13:58:28 -07:00
Albert Yi 9975b2dd35 don't require saved_search params when creating a new saved search 2018-04-12 13:56:02 -07:00
Albert Yi 26a2e60d04 fixes #3623 2018-04-12 13:36:56 -07:00
Albert Yi 883b36ac2e fixes #3620 2018-04-12 13:00:48 -07:00
Albert Yi cd88a8df9f fixes #3620 2018-04-12 13:00:48 -07:00
Albert Yi 37ba6714d1 fixes #3617 2018-04-12 12:11:27 -07:00
Albert Yi d747ffc640 fixes #3621 2018-04-12 12:09:33 -07:00
Albert Yi c9fe91c74b fix base dir for image distribute rake task 2018-04-12 10:48:53 -07:00
Albert Yi 03e2a2ca3b add rake task for distributing images using storage managers 2018-04-12 10:40:24 -07:00
Albert Yi 25f371c8c6 Merge branch 'master' of github.com:r888888888/danbooru 2018-04-12 09:53:02 -07:00
Albert Yi e4e79c027e Merge pull request #3618 from evazion/fix-rails-5.1-bugs
Fix rails 5.1 bugs
2018-04-12 09:44:18 -07:00
Albert Yi b0ac895964 remove unused attr_accessor 2018-04-11 14:09:45 -07:00
Albert Yi d9d98f05c2 Merge branch 'rails-5.1' 2018-04-11 11:40:36 -07:00
Albert Yi a25629bff9 fixes #3594 2018-04-11 11:14:58 -07:00
Albert Yi c46996f937 Merge pull request #3616 from evazion/fix-deviantart-api
Fix #3260: Exception when uploading certain DeviantArt posts
2018-04-10 16:54:44 -07:00
Albert Yi 485c3b01c7 add uploader-id and top-tagger-id data attrs to post previews 2018-04-09 11:12:07 -07:00
Albert Yi 23fef71346 Merge pull request #3609 from evazion/fix-3603
Fix #3603: Unable to view images on Hijiribe/Sonohara when Danbooru is blocked
2018-04-09 10:56:00 -07:00
Albert Yi 5f33238074 Merge pull request #3612 from evazion/fix-iqdb-errors
Improve IQDB error handling
2018-04-09 10:53:40 -07:00
r888888888andevazion abce4d2551 Raise error on unpermitted params.
Fail loudly if we forget to whitelist a param instead of silently
ignoring it.

misc models: convert to strong params.

artist commentaries: convert to strong params.

* Disallow changing or setting post_id to a nonexistent post.

artists: convert to strong params.

* Disallow setting `is_banned` in create/update actions. Changing it
  this way instead of with the ban/unban actions would leave the artist in
  a partially banned state.

bans: convert to strong params.

* Disallow changing the user_id after the ban has been created.

comments: convert to strong params.

favorite groups: convert to strong params.

news updates: convert to strong params.

post appeals: convert to strong params.

post flags: convert to strong params.

* Disallow users from setting the `is_deleted` / `is_resolved` flags.

ip bans: convert to strong params.

user feedbacks: convert to strong params.

* Disallow users from setting `disable_dmail_notification` when creating feedbacks.
* Disallow changing the user_id after the feedback has been created.

notes: convert to strong params.

wiki pages: convert to strong params.

* Also fix non-Builders being able to delete wiki pages.

saved searches: convert to strong params.

pools: convert to strong params.

* Disallow setting `post_count` or `is_deleted` in create/update actions.

janitor trials: convert to strong params.

post disapprovals: convert to strong params.

* Factor out quick-mod bar to shared partial.
* Fix quick-mod bar to use `Post#is_approvable?` to determine visibility
  of Approve button.

dmail filters: convert to strong params.

password resets: convert to strong params.

user name change requests: convert to strong params.

posts: convert to strong params.

users: convert to strong params.

* Disallow setting password_hash, last_logged_in_at, last_forum_read_at,
  has_mail, and dmail_filter_attributes[user_id].

* Remove initialize_default_image_size (dead code).

uploads: convert to strong params.

* Remove `initialize_status` because status already defaults to pending
  in the database.

tag aliases/implications: convert to strong params.

tags: convert to strong params.

forum posts: convert to strong params.

* Disallow changing the topic_id after creating the post.
* Disallow setting is_deleted (destroy/undelete actions should be used instead).
* Remove is_sticky / is_locked (nonexistent attributes).

forum topics: convert to strong params.

* merges https://github.com/evazion/danbooru/tree/wip-rails-5.1
* lock pg gem to 0.21 (1.0.0 is incompatible with rails 5.1.4)
* switch to factorybot and change all references

Co-authored-by: r888888888 <r888888888@gmail.com>
Co-authored-by: evazion <noizave@gmail.com>

add diffs
2018-04-06 18:09:57 -07:00
Albert Yi fc344e589d potential fix for #3604 2018-04-06 16:14:01 -07:00
Albert Yi 5a87fcfde3 Merge pull request #3602 from evazion/feat-link-userscripts
Add about:userscripts to site map.
2018-04-05 15:19:28 -07:00
Albert Yi 7d745ac93f Merge pull request #3598 from evazion/fix-3597
Possible fix for #3597: Poor performance since last deploy
2018-04-05 13:11:21 -07:00
Albert Yi 916c73b7a8 Merge branch 'master' of github.com:r888888888/danbooru 2018-04-05 12:51:36 -07:00
Albert Yi bf23a976e3 fix bug with async tagger check 2018-04-05 12:51:29 -07:00
Albert Yi e006380567 change reason field on flags and appeals to text 2018-04-03 16:14:42 -07:00
Albert Yi b219992b7d add async processing for top tagger 2018-04-03 16:00:36 -07:00
Albert Yi 23cb58c4e3 Merge pull request #3592 from evazion/fix-3583
Fix #3583: Copying notes should also change meta tags in the destination post
2018-04-02 10:25:15 -07:00
Albert Yi e4c30811b6 Merge pull request #3588 from evazion/fix-3570
Add limits on max dimensions of uploads
2018-03-29 20:20:42 -07:00
Albert Yi 6bb814678e Merge pull request #3589 from evazion/fix-libvips-84
Workaround for libvips-8.4 incompatibility
2018-03-29 20:20:07 -07:00
Albert Yi 4ff5af626f upgrade to ruby 2.5.1 2018-03-29 09:56:35 -07:00
Albert Yi fa9442209e fix typo in storagemanager/s3 2018-03-28 17:23:07 -07:00
Albert Yi 18dd47c557 Merge branch 'master' of github.com:r888888888/danbooru 2018-03-28 17:19:35 -07:00
Albert Yi 929b2fa896 move default base url to method to deal with deployment issues 2018-03-28 17:19:21 -07:00
Albert Yi 8bdb7e982d Merge pull request #3584 from evazion/feat-libvips
Fix #3582: Switch from ImageMagick to libvips
2018-03-28 16:34:18 -07:00
Albert Yi 6c790c61d3 replace uploader information post previews and comment listing, rename tagger to top tagger 2018-03-27 10:49:41 -07:00
Albert Yi ce7e31325c Merge pull request #3577 from evazion/feat-storage-manager
Introduce storage manager concept
2018-03-27 09:28:17 -07:00
Albert Yi 448ec81e97 Merge pull request #3541 from evazion/fix-3539
Fix #3539: Open redirect vulnerabilities
2018-03-08 16:02:02 -08:00
Albert Yi 418b2beae5 Merge pull request #3566 from r888888888/most-valued
Post taggers
2018-03-08 16:01:40 -08:00
r888888888 3657cacd17 * post keeper is calculated synchronously
* add fallback mechanism in case archive service is not up
* pass along most recently added tags to any keeper calculation
2018-03-08 16:00:44 -08:00
r888888888 0c5dcbbf68 Revert "Revert "implement post keepers""
This reverts commit b9fcfe0442.
2018-03-06 18:04:31 -08:00
Albert Yi 159d807026 Merge pull request #3568 from evazion/fix-3552
Fix #3552: Upload filesize limits can be bypassed
2018-02-28 10:44:50 -08:00
Albert Yi 77e7a6553c Merge pull request #3567 from evazion/fix-3518
Fix #3518: Don't prune mod actions.
2018-02-27 16:17:39 -08:00
Albert Yi 7d5ad1bcc4 Merge pull request #3563 from evazion/fix-3528
Fix #3528: Add method to prevent image-hosting CloudFlare sites from altering the image
2018-02-26 17:40:46 -08:00
Albert Yi f6716f3df5 Merge pull request #3564 from evazion/fix-3554
Fix #3554: BUR approval bugs
2018-02-26 17:40:00 -08:00
Albert Yi e6d96a7f28 Merge pull request #3562 from evazion/fix-3548
#3548: Upgrade to jquery-2.2.4
2018-02-26 15:43:52 -08:00
r888888888 916a57b2fd update deprecated jquery 2018-02-22 11:46:11 -08:00
r888888888 689b5690bf fixes #3560 2018-02-22 11:15:42 -08:00
Albert Yi f38960092d Merge pull request #3559 from r888888888/revert-3551-fix-3528
Revert "Fix #3528: Add method to prevent image-hosting CloudFlare sites from altering the image"
2018-02-21 17:20:30 -08:00
Albert Yi d8340f83db Revert "Fix #3528: Add method to prevent image-hosting CloudFlare sites from altering the image" 2018-02-21 17:20:13 -08:00
Albert Yi 18871b60ba Merge pull request #3551 from evazion/fix-3528
Fix #3528: Add method to prevent image-hosting CloudFlare sites from altering the image
2018-02-21 14:52:43 -08:00
Albert Yi 1938319504 Merge pull request #3555 from evazion/fix-3554
#3554: Allow admins to edit BUR forum topic/post ids
2018-02-21 14:52:11 -08:00
Albert Yi ceecc62aa8 Merge pull request #3557 from evazion/fix-autocomplete-consistency
Fix inconsistencies in autocomplete behavior
2018-02-21 14:51:50 -08:00
Albert Yi 9204cd825e Merge pull request #3550 from evazion/fix-3548
#3548: Upgrade to jquery-1.12.4
2018-02-15 20:21:04 -08:00
Albert Yi 26b260f1c8 Merge pull request #3549 from evazion/fix-autocomplete-autofocus
Autocomplete: Fix issues with Enter key
2018-02-15 11:19:32 -08:00
Albert Yi 8d3e3dd523 Merge pull request #3546 from evazion/fix-3545
Fix #3545: Autocomplete: enter key should submit on exact match
2018-02-13 10:30:04 -08:00
Albert Yi 4e10913e31 Merge pull request #3544 from BrokenEagle/fix-autocomplete-nosource
Clear results when a non-autocomplete metatag is used
2018-02-13 00:30:31 -08:00
Albert Yi 27f2b9d365 Merge pull request #3540 from r888888888/revert-3529-most-valued
Revert "implement post keepers"
2018-02-07 12:29:06 -08:00
Albert Yi b9fcfe0442 Revert "implement post keepers" 2018-02-07 12:28:56 -08:00
Albert Yi 2e62916832 Merge pull request #3529 from r888888888/most-valued
implement post keepers
2018-02-07 12:10:38 -08:00
Albert Yi a6a2c7a3a1 Merge pull request #3538 from evazion/fix-3532
Fix #3532: Make Enter key accept current tag during autocomplete.
2018-02-07 12:10:24 -08:00
Albert Yi b03c8084a5 Merge pull request #3536 from BrokenEagle/fix-resize-with-user-setting
Fix the auto resize in desktop mode (ref: a95af95e)
2018-02-05 15:11:26 -08:00
r888888888 ba6e3f4a0e gracefully handle bad connection errors to replica db ref #3212 2018-02-05 15:05:21 -08:00
r888888888 308e3670df gracefully handle unavailable pg connection errors 2018-02-05 12:38:01 -08:00
r888888888 d10c6a3af7 display uploader for mods 2018-02-01 17:10:09 -08:00
r888888888 da2864e233 change keeper name to tagger 2018-02-01 17:07:30 -08:00
r888888888 e0ec9ed518 fix ordering of forum posts in topics 2018-02-01 16:35:47 -08:00
Albert Yi bd58a5be10 Merge pull request #3530 from evazion/fix-3528
Fix #3527: Bookmarklet timeouts for Members.
2018-02-01 16:03:17 -08:00
r888888888 32cc508edb hide uploader information on posts/show page, add keeper information 2018-02-01 14:38:03 -08:00
r888888888 146b27f4cf update rbenv version 2018-01-30 12:05:38 -08:00
r888888888 2c4a0cd79d set rbenv path for staging 2018-01-30 12:03:03 -08:00