Ginger
728c5828ba
feat: Add a panic handler and clean up error page
2026-03-18 13:43:34 -04:00
Ginger
50c94d85a1
fix: Code cleanup
2026-03-18 13:18:53 -04:00
Ginger
0cc188f62c
fix: Remove redirect on index
2026-03-18 12:42:55 -04:00
Ginger
6451671f66
fix: Update doc comment
2026-03-18 12:42:55 -04:00
theS1LV3R
ca21a885d5
chore: Rename option index_page_allow_indexing to allow_web_indexing
2026-03-18 12:42:55 -04:00
Ginger
51b450c05c
feat: Use a context struct to store global template context
2026-03-18 12:42:55 -04:00
theS1LV3R
f9d1f71343
fix: Fix logic error
2026-03-18 12:42:55 -04:00
theS1LV3R
7b6bf4b78e
feat: Add option for a noindex meta tag on the HTML index page
...
Adds a new config option `index_page_allow_indexing` which defaults to false.
Fixes : !1527
2026-03-18 12:42:55 -04:00
Ginger
67d5619ccb
fix: Fix password reset page appearance in light mode
2026-03-18 12:42:55 -04:00
Ginger
bf001f96d6
feat: Restrict reset token command
2026-03-18 12:42:55 -04:00
Ginger
ae2b87f03f
fix: Fix M_NOT_FOUND for users with no origin set
2026-03-18 12:42:55 -04:00
Ginger
957cd3502f
fix: Evil CSS hackery
2026-03-18 12:42:55 -04:00
Ginger
a109542eb8
fix: Disable text selection on k10y
2026-03-18 12:42:55 -04:00
Ginger
8c4844b00b
fix: Use error page for extractor rejections
2026-03-18 12:42:55 -04:00
Ginger
eec7103910
feat: Implement dedicated 404 page for routes under /_continuwuity/
2026-03-18 12:42:55 -04:00
Ginger
43aa172829
feat: Move index to /_continuwuity/
2026-03-18 12:42:55 -04:00
Ginger
9b4c483b6d
chore: Remove unnecessary database map left over from refactor
2026-03-18 12:42:55 -04:00
Ginger
b885e206ce
fix: Use server name in index again
2026-03-18 12:42:55 -04:00
Ginger
07a935f625
fix: Add CSRF protection
2026-03-18 12:42:55 -04:00
Ginger
d13801e976
fix: Disallow issuing password reset tokens for deactivated users
2026-03-18 12:42:55 -04:00
Ginger
5716c36b47
chore: Change password reset page path
2026-03-18 12:42:55 -04:00
Ginger
8b726a9c94
chore: Cleanup
2026-03-18 12:42:55 -04:00
Ginger
ffa3c53847
feat: Implement a webpage for self-service password resets
2026-03-18 12:42:55 -04:00
Ginger
da8833fca4
feat: Implement a command for issuing password reset links
2026-03-18 12:42:55 -04:00
Ginger
267feb3c09
feat: Add a new service for handling password resets
2026-03-18 12:42:55 -04:00
Ginger
3d50af0943
refactor: Split web code into multiple files, improve static resource loading
2026-03-18 12:42:55 -04:00
Ginger
9515019641
fix: Allow cognitive_complexity on two particularly large functions
2026-03-18 10:57:50 -04:00
Renovate Bot
acef746d26
fix(deps): Update rust crate recaptcha-verify to 0.2.0
2026-03-17 13:20:50 +00:00
Shane Jaroch
ff85145ee8
fix: missing logic inversion for acquired keys (should speed up room joins)
2026-03-13 20:54:38 -04:00
timedout
906c3df953
style: Reduce migration warning verbosity to info
...
They aren't actually warning of anything
2026-03-09 13:30:24 +00:00
timedout
33e5fdc16f
style: Reduce verbosity of fix_corrupt_msc4133_fields
2026-03-09 13:30:24 +00:00
timedout
77ac17855a
fix: Don't fail on invalid stripped state entries during migration
2026-03-09 13:30:24 +00:00
timedout
65ffcd2884
perf: Insert missed migration markers into fresh databases
2026-03-09 13:30:24 +00:00
timedout
7ec88bdbfe
feat: Make noise about migrations and make errors more informative
2026-03-09 13:30:24 +00:00
Ginger
da3fac8cb4
fix: Use more robust check for max_request_size
2026-03-09 13:27:39 +00:00
Trash Panda
3366113939
fix: Retrieve content_type and video width/height
2026-03-09 13:27:39 +00:00
Trash Panda
9039784f41
fix: Clippy lints
2026-03-09 13:27:39 +00:00
Trash Panda
7f165e5bbe
fix: Refactor and block media downloads larger than max_request_size
2026-03-09 13:27:39 +00:00
Trash Panda
e8746760fa
feat(url-preview): Optionally download audio/video files for url preview requests
2026-03-09 13:27:39 +00:00
Ginger
dac619b5f8
fix: Lower "timeline for newly joined room is empty" to debug_warn
...
Reviewed-by: nex <me@nexy7574.co.uk>
2026-03-07 11:56:15 -05:00
timedout
94c5af40cf
fix: Automatically remove corrupted appservice registrations
2026-03-06 14:21:04 +00:00
Ginger
7e501cdb09
fix: Fix left rooms always being sent on initial sync
2026-03-04 12:51:54 -05:00
Shane Jaroch
da182c162d
fix(registration): discrepancy between 401 response and 500 log statement
2026-03-04 16:18:38 +00:00
Skyler Mäntysaari
5feb08dff2
docs: Update delete-past-remote-media example with correct flag syntax
...
It's not just a single `-` but rather `--`.
2026-03-04 15:37:06 +00:00
Ben Botwin
5eb74bc1dd
feat: Readded support for reading registration tokens from a file
...
Co-authored-by: Ginger <ginger@gingershaped.computer>
2026-03-04 15:06:26 +00:00
Niklas Wojtkowiak
80c9bb4796
fix(rooms): prevent removing admin room alias
...
Only the server user can now remove the #admins alias, matching the
existing check for setting the alias. This prevents users from
accidentally breaking the admin room functionality.
fixes #1408
2026-03-04 15:05:24 +00:00
Ginger
83883a002c
fix(complement): Fix complement conflicting with first-run
...
- Disabled first-run mode when running Complement tests
- Updated logging config under complement to be a bit less verbose
- Changed test result and log output locations
2026-03-04 15:04:37 +00:00
31a05b9c
8dd4b71e0e
fix: make dropped PDU warning less useless
2026-03-04 14:58:01 +00:00
Jade Ellis
754959e80d
fix: Don't process admin escape commands for local users from federation
...
Reviewed-By: timedout <git@nexy7574.co.uk>
2026-03-03 19:55:50 +00:00
timedout
37888fb670
fix: Limit body read size of remote requests (CWE-409)
...
Reviewed-By: Jade Ellis <jade@ellis.link>
2026-03-03 19:54:34 +00:00
