hj/pleroma
1
0
Fork 0
Code Issues Pull requests Projects Releases Packages Wiki Activity

Merge branch 'audit-mix-audit-report' (#69) into release/2.11

Browse source 
# Conflicts:
#	lib/pleroma/http/adapter_helper/hackney.ex
This commit is contained in:
Lain Soykaf 2026-10-22 16:37:08 +04:00
commit 9ea8d37e9f
No known key found for this signature in database
23 changed files with 216 additions and 22 deletions
Download patch file Download diff file Expand all files Collapse all files

0
changelog.d/docs-elixir-1.17.skip Normal file
View file

1
changelog.d/gun-default.change Normal file
View file

@ -0,0 +1 @@
Gun is now the default HTTP client instead of Hackney

1
changelog.d/hackney-http1.fix Normal file
View file

@ -0,0 +1 @@
Hackney: use HTTP/1.1 only, so closing one media proxy response no longer breaks other downloads from the same host

1
changelog.d/hackney-proxy-ip-host.fix Normal file
View file

@ -0,0 +1 @@
Hackney: use the configured proxy when its host is an IP address; Hackney 4 ignored such proxies and connected directly

1
changelog.d/scrubber-hidden-schemes.security Normal file
View file

@ -0,0 +1 @@
Scrubbers: remove links and images whose scheme is hidden with tabs, newlines or leading control characters (for example java<TAB>script:), which browsers still run as javascript:. Custom scrubbers should use Pleroma.HTML.URIAttributes.allow_tag_with_uri_attributes instead of the FastSanitize macro