amechama/sharkey
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity
26,233 Commits 3 Branches 0 Tags 162 MiB
e7349144f0
Commit Graph

26233 Commits

This Branch
This Branch
All Branches
Author SHA1 Message Date
Chocolate Pie
c96bc36fed
Merge pull request from GHSA-7pxq-6xx9-xpgm 
* fix: fix improper authorization when accessing with third-party application

* refactor: refactor type definitions

* fix: get rid of unnecessary access limitation

* enhance: サードパーティアプリケーションがWebsocket APIを使えるように

* fix: add missing parentheses

* Revert "fix(backend): add missing kind definition for admin endpoints to improve security"

This reverts commit 5150053275.

* frontend: 翻訳の抜けを訂正, read:adminとwrite:adminはアクセス発行トークンのデフォルトでは非表示にする

* enhance(test): misskey-ghsa-7pxq-6xx9-xpgmに関するテストを追加

* enhance(test): Websocket APIに対するテストも追加

* enhance(refactor): `@/misc/api-permissions.ts`を`misskey-js/permissions`に統合

* fix(frontend): アクセストークン発行UIで全ての権限を有効にした際、管理者用APIへのアクセスも許可してしまう問題を修正

* enhance(backend): Websocketの接続に最低限必要な権限を変更

* fix(backend): `/api/admin/meta`をサードパーティアプリケーションからはアクセスできないように

* fix(backend): エンドポイントにアクセスするために必要な権限を変更

* fix(frontend/locale): Add missing type declaration

* chore: update `misskey-js/src/autogen`

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
 2023-12-27 15:08:59 +09:00
syuilo
d87fecda7f chore(frontend): update team members 2023-12-27 14:21:34 +09:00
ShittyKopper
6242f37111 Partial Revert "fix: fix: notification count position" 
Firefox now implements :has. There is no reason for this workaround

This partially reverts commit 4f0bc185af.
 2023-12-26 22:09:25 +03:00
ShittyKopper
aafdcccd24 fix: note history not working 2023-12-26 22:02:48 +03:00
ShittyKopper
32318bbbfa fix: un-hardcode more border radius values 
all of these are blind find and replace, no clue if they end up breaking
anything
 2023-12-26 22:02:48 +03:00
ShittyKopper
62a5793e71 fix: don't show filename as alt text 2023-12-26 22:02:48 +03:00
ShittyKopper
2f5c51c1ca fix: don't load text of empty draft 
this fixes a small ux quirk where blanking a reply and cancelling it
results in an empty reply next time you try to reply to that note, accidentally
un-tagging everyone
 2023-12-26 22:02:48 +03:00
GrapeApple0
6855079811
refactor: paginationの型を明示する (#12809) 
* refactor: paginationの型を明示する

* asではなくsatisfiesを使うように
 2023-12-26 21:40:27 +09:00
shiosyakeyakini
9022b05fea
fix(backend): 非センシティブのみ（リモートはいいねのみ）が昨日していない問題を修正 (#12801) (#12802) 
Co-authored-by: sorairo <sorairo@shiosyakeyakini.info>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
 2023-12-26 18:42:37 +09:00
zyoshoka
75034d9240
refactor(frontend): Reactivityで型を明示するように (#12791) 
* refactor(frontend): Reactivityで型を明示するように

* fix: プロパティの参照が誤っているのを修正

* fix: 初期化の値を空配列に書き換えていた部分をnullに置き換え
 2023-12-26 14:19:35 +09:00
かっこかり
a9b42765f9
(dev) Issue Templateに、自分で実装してPRを出したいかの意思表明を追加 (#12799) 
* Update 01_bug-report.yml

* Update 02_feature-request.yml
 2023-12-26 11:40:55 +09:00
Soli
eb23798c9f
fix(frontend): ロールアサイン時の通知で，ロールアイコンが縮小されずに表示される問題を修正 (misskey-dev#12805) (#12806) 2023-12-26 11:40:31 +09:00
Marie
5bc036180f upd: module versions 2023-12-25 21:37:13 +01:00
Marie
a67d31c963 merge: KaTeX support (#261) 
Closes #174
 2023-12-25 21:28:25 +01:00
dakkar
8fd72fa12c remove spurious indent 2023-12-25 19:51:41 +00:00
dakkar
8d291ef039 formula component based on katex 
thanks a lot to MoshiBar for the initial implementation!
 2023-12-25 18:12:55 +00:00
Marie
6f63ff62fc fix: autocomplete on users being janky 2023-12-25 18:40:49 +01:00
dakkar
62a0f43c84 add package 2023-12-25 17:31:21 +00:00
FineArchs
4f247a0784
Feat: クリックイベントを発生させるMFM構文を追加 (#12798) 
* Update MkMisskeyFlavoredMarkdown.ts

* fix MkMisskeyFlavoredMarkdown.ts

* Update MkAsUi.vue

* Update ui.ts

* Fix MkMisskeyFlavoredMarkdown.ts

* Update CHANGELOG.md

* fix ui.ts

* revert CHANGELOG.md

* Update CHANGELOG.md
 2023-12-25 18:03:06 +09:00
syuilo
95547da5a5
Update SECURITY.md 2023-12-25 16:50:41 +09:00
syuilo
b0799089cd
Update SECURITY.md 2023-12-25 16:47:26 +09:00
Sayamame-beans
8ed7c7486c
fix(frontend): モデログ表示の"logYellow"が機能していない問題を修正 (#12794) 
* fix: logYellow of moderation log was not working

* docs(changelog): Fix: 一部のモデログ(logYellowでの表示対象)について、表示の色が変わらない問題を修正
 2023-12-25 14:49:06 +09:00
anatawa12
fd040c50b1
fix: 自分のdirect noteがuser list timelineに追加されない (#12782) 
* fix: 自分のdirect noteがuser list timelineに追加されない

* docs(changelog): Fix: 自分のdirect noteがuser list timelineに追加されない
 2023-12-25 11:56:00 +09:00
Marie
fd57c7e24c merge: authorized fetch (#247) 
Closes #217
 2023-12-24 10:02:53 +01:00
anatawa12
237fe242ad
chore(misskey-js): update misskey-js with api.json (#12778) 
pnpm build && pnpm build-misskey-js-with-types && pnpm --filter misskey-js api
 2023-12-24 17:54:00 +09:00
zyoshoka
0009aa332b
refactor(frontend): import宣言周りのエラーを修正 (#12773) 2023-12-24 16:16:58 +09:00
syuilo
bf45c23098 Update CHANGELOG.md 2023-12-24 15:38:03 +09:00
syuilo
7167bb397e Update CHANGELOG.md 2023-12-24 15:31:48 +09:00
syuilo
0393d8f53c
New Crowdin updates (#12759) 
* New translations ja-jp.yml (Spanish)

* New translations ja-jp.yml (Chinese Traditional)

* New translations ja-jp.yml (Korean)

* New translations ja-jp.yml (Korean)
 2023-12-24 15:25:13 +09:00
Nya Candy
cae40e68e4
fix: lint (#12761) 2023-12-24 15:24:51 +09:00
おさむのひと
36701f8a7c
fix(backend): 1702718871541-ffVisibility.jsのdownが壊れている (#12767) 2023-12-24 15:24:26 +09:00
syuilo
6fce36374d enhance(backend): センシティブワードの設定がハッシュタグトレンドにも適用されるように 2023-12-24 15:23:56 +09:00
anatawa12
316ffcea54
ci: Get api.json from Misskeyでupload-artifact@v4で同名artifactでエラーになるのを修正 (#12770) 
* ci: upload-artifact@v4で同名artifactでエラーになるのを修正

Co-authored-by: おさむのひと <46447427+samunohito@users.noreply.github.com>

* report-api-diff.ymlの最中にエラーが発生したときに分かりづらいので、PRにコメントを残すようにする

* 古いget-api-diffを使ってるactionとの互換性をもたせる

---------

Co-authored-by: おさむのひと <46447427+samunohito@users.noreply.github.com>
 2023-12-24 14:20:43 +09:00
dakkar
a3dd61dec4 fix logging 2023-12-23 21:27:48 +00:00
dakkar
e6c02909c7 fix typo 
thanks @Marie
 2023-12-23 20:11:53 +00:00
Marie
53365159e8 merge: real-time updates on note detail view (#246) 
Closes #223

Reviewed-on: https://git.joinsharkey.org/Sharkey/Sharkey/pulls/246
Reviewed-by: Marie <marie@kaifa.ch>
 2023-12-23 21:00:00 +01:00
Marie
eb036d558f fix: note footer not properly resizing 2023-12-23 19:21:37 +01:00
Marie
978ee64fd1 Merge: always use black shadow in SK instance ticker (#254) 
Closes #223
 2023-12-23 18:57:38 +01:00
dakkar
e14a06cd16 always use black shadow in instance ticker #238 
we know this looks decent because it's what the MkInstanceTicker
already does
 2023-12-23 15:31:19 +00:00
dakkar
477cda0b63 authorized fetch: log when things go wrong 2023-12-23 15:26:42 +00:00
dakkar
1984416e3e authorized fetch: let /@instance.actor through 
this is probably never actually used, but it still looks like a good
idea (also, FireFish does it)

thanks @ShittyKoper for noticing!
 2023-12-23 15:26:42 +00:00
dakkar
e5ea882ed7 authorized fetch #217 
the implementation is copied from the other places we already check
HTTP signatures, and cross-checked with Firefish's implementation
 2023-12-23 15:26:42 +00:00
Marie
6526968f2d fix: check 2023-12-23 16:08:04 +01:00
dakkar
fea6428245 add missing .value 2023-12-23 14:47:14 +00:00
dakkar
576a87118c real-time update: adjust replyCount up/down 
this also fixes the connecting lines in the Sk-style view

thanks @ShittyKopper for reporting the bug!

NOTE: at this point, the `isDeletedRef` boolean is pretty much
useless, because we're directly removing deleted notes from the
`replies` array and therefore from the DOM (we were just hiding them,
before); I'm intentionally not touching `isDeletedRef` to simplify
merges from upstream
 2023-12-23 14:09:52 +00:00
dakkar
d06939bd25 real-time update: hide deleted replies 2023-12-23 14:09:52 +00:00
dakkar
683b4aafb2 real-time updates on note detail view 
`useNoteCapture` already subscribes to all updates for a note, so
we can tell it when a note gets replied to, too

Since I'm not actually adding any extra subscription in the client,
just an extra callback, there should be no overhead when replies are
not coming in.

Also, all the timelines already call `useNoteCapture` for each note
displayed, so we know the whole `GlobalEventService` thing works fine.

Many thanks to VueJS for taking care of all the DOM complications
 2023-12-23 14:09:51 +00:00
Marie
b3b89567ee merge: upstream 2023-12-23 14:26:24 +01:00
syuilo
471c8ec050 Update CHANGELOG.md 2023-12-23 19:59:27 +09:00
anatawa12
2f425aa03f
fix: ブロックされててもpure RNできる (#12758) 
なぜかわからないけど元々Quoteはできるようなのでそれに戻しました
 2023-12-23 17:55:34 +09:00