Commit Graph

205 Commits

Author SHA1 Message Date
Jaehong Kang 04075ee0be
enhance(backend): Implementation of HTTP header and body validation to fix SIF-2023-002 (#12334)
Using Buffer instead of string

Co-authored-by: perillamint <perillamint@silicon.moe>
2023-11-15 11:13:34 +09:00
syuilo 65c5626b65
Merge pull request from GHSA-3f39-6537-3cgc
This commit implements HTTP header and body validation to fix
[SIF-2023-002](https://advisory.silicon.moe/advisory/sif-2023-002/)

Signed-off-by: perillamint <perillamint@silicon.moe>
Co-authored-by: perillamint <perillamint@silicon.moe>
Co-authored-by: yunochi <yuno@yunochi.com>
2023-11-14 17:09:45 +09:00
syuilo 30bb24d18c update deps 2023-11-14 10:35:48 +09:00
syuilo 1729307fcf update deps 2023-11-03 14:41:21 +09:00
syuilo 77db652bff update deps 2023-11-01 14:06:54 +09:00
syuilo a8dc6d08b1 update deps 2023-10-28 12:31:18 +09:00
MomentQYC 9caae8a10a
feat: Facilitates the rollback of migration operations (#12109)
* Update package.json

* Update package.json
2023-10-23 16:42:54 +09:00
syuilo fdeee5dd05 update deps 2023-10-23 09:20:55 +09:00
syuilo 42a3489bcb update deps 2023-10-20 15:46:12 +09:00
syuilo cc256f117e update deps 2023-10-19 19:51:59 +09:00
syuilo 145c5c8b2b update deps 2023-10-18 09:43:59 +09:00
syuilo e9db0680c4 update deps 2023-10-17 09:04:17 +09:00
syuilo 9338ab461e update deps 2023-10-16 20:13:05 +09:00
syuilo cf6e53b2ac update deps 2023-10-10 16:26:48 +09:00
syuilo 13dbfef9f8 update deps 2023-10-09 20:55:40 +09:00
syuilo 95dc70021f update deps 2023-10-06 17:19:17 +09:00
syuilo ac19b055c7 update deps 2023-09-29 15:11:08 +09:00
syuilo 509cea511c update deps 2023-09-24 11:09:49 +09:00
syuilo 5a4cf059ee update deps 2023-09-23 12:46:19 +09:00
syuilo 032b6c6afb update deps 2023-09-22 16:47:42 +09:00
syuilo 6459eadcf1 update deps 2023-09-21 10:25:44 +09:00
syuilo b9c6992aac
update deps (#11849)
* update deps

* wip

* wip
2023-09-20 16:43:45 +09:00
syuilo 6cf466e5d1
update deps (#11820)
* update deps

* fix

* wip

* wip

* wip

* Update docker-compose.yml.example

* Delete reviewer-lottery.yml

* Update RepositoryModule.ts

* wip

* wip

* clean up

* update deps

* wip

* wip
2023-09-15 14:28:29 +09:00
syuilo ff9a65e8fa
feat: passkey support (#11804)
https://github.com/MisskeyIO/misskey/pull/149
2023-09-08 14:05:03 +09:00
syuilo ca00a08e6e feat: introduce aidx and make it default
Co-Authored-By: MeiMei <30769358+mei23@users.noreply.github.com>
2023-09-06 18:33:51 +09:00
syuilo 59ab4af7ca update deps 2023-09-05 17:43:43 +09:00
syuilo 1f7a81aae7
update deps (#11764)
* update deps

* node16

* wip

* wip

* wip

* Update test-utils.ts

* wip

* Update tsconfig.json

* wip

* Update package.json

* wip

* Update following.vue

* Update followers.vue

* Update index.vue

* Update share.vue

* Update MkUserPopup.vue

* Update MkPostForm.vue

* wip

* Update MkTokenGenerateWindow.vue

* Update MkPagination.vue

* refactor

* update deps

* update deps

* Update sw.ts

* wip

* wip

* wip

* Update FetchInstanceMetadataService.ts

* Update FetchInstanceMetadataService.ts

* update node

* update deps

* 🎨
2023-09-04 13:33:38 +09:00
syuilo 2b4c8c9e0f
update deps (#11409)
* update deps

* Update .eslintrc.js

* Update .eslintrc.js

* lint

* lint

* Update update.ts

* update deps

* Update .eslintrc.js
2023-07-31 19:14:20 +09:00
woxtu 5096be06ac
Remove an unused dependency (#11405) 2023-07-29 15:17:29 +09:00
Kagami Sascha Rosylight eb7b5f905a
feat(backend): support OAuth 2.0 authorization (#11053)
* feat(backend): support OAuth 2.0 authorization

* secureRndstr fix

* nanndekowareta

* nanndekowareta2

* nanndekowareta3

* unref?

* refactor to not close fastify

* use microformats-parser

* Update OAuth2ProviderService.ts

* clarify the reason behind dns lookup

* refactor(backend): use @types/oauth2orize-pkce (#11350)

* refactor(backend): use @types/oauth2orize-pkce

* Update package.json

* Update pnpm-lock.yaml

---------

Co-authored-by: Kagami Sascha Rosylight <saschanaz@outlook.com>

---------

Co-authored-by: mtgto <hogerappa@gmail.com>
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-07-27 18:51:58 +09:00
Acid Chicken (硫酸鶏) cf3ac3c0be
build: close #10953 2023-07-26 22:06:00 +09:00
Acid Chicken (硫酸鶏) e6fca72171
perf: use slacc instead of unzipper (#10780)
Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-07-20 17:00:54 +09:00
woxtu 5f5c4fc44f
Remove unused dependencies (#11327) 2023-07-20 06:53:35 +09:00
syuilo 54c0ed2ed7 update deps 2023-07-18 20:00:45 +09:00
syuilo 545371011a use happy-dom 10.0.3
Resolve #11287
2023-07-16 07:43:55 +09:00
woxtu b392f44b81
refactor(backend): Improve UUID generation (#11286)
* Replace with `crypto.randomUUID()`

* Remove uuid
2023-07-15 18:39:38 +09:00
syuilo 9a5bc78eb4 update deps 2023-07-15 16:07:30 +09:00
syuilo 1f181536ae use engines 2023-07-08 08:52:51 +09:00
popkirby 8daca59ca6
perf(backend): use mutex for nsfw model loading (#11109)
Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-07-08 07:27:26 +09:00
syuilo d5c4e77c44 update deps 2023-07-07 10:53:06 +09:00
syuilo 8099bc24e1
refactor(backend): use node16 for moduleResolution (#10938)
* refactor(backend): use node16 for moduleResolution

* update deps

* Update tsconfig.json

* ✌️

* revive KEYWORD

* restore strict-event-emitter-types dependency

* restore ms dependency

* cancel redundant import reorder

* fix

* Delete ms.ts

* remove rndstr

---------

Co-authored-by: Kagami Sascha Rosylight <saschanaz@outlook.com>
2023-06-25 21:13:15 +09:00
Kagami Sascha Rosylight ef354e94f2
refactor(backend): replace rndstr with secureRndstr (#11044)
* refactor(backend): replace rndstr with secureRndstr

* Update pnpm-lock.yaml

* .js
2023-06-25 11:04:33 +09:00
Kagami Sascha Rosylight a2c0573f84
refactor(backend): replace private-ip with ipaddr.js (#11041)
* refactor(backend): replace private-ip with ipaddr.js

* restore ip-cidr
2023-06-25 06:35:09 +09:00
syuilo 60cc7f62e6 update deps 2023-06-24 13:11:53 +09:00
syuilo 91d790bbb6 update deps 2023-06-02 11:34:38 +09:00
syuilo f930eaee02
perf(backend): use websockets/ws instead of theturtle32/WebSocket-Node (#10884)
* perf(backend): use websockets/ws instead of theturtle32/WebSocket-Node

Resolve #10883

* refactor

* Update StreamingApiServerService.ts

* Update StreamingApiServerService.ts

* ✌️

* Update StreamingApiServerService.ts

* fix main stream init

* fix timing 2

* setIntervalの重複を避ける(気休め)

* add comment

* ✌️

---------

Co-authored-by: tamaina <tamaina@hotmail.co.jp>
2023-05-29 13:32:19 +09:00
syuilo fd7b77c542
enhance(backend): migrate bull to bullmq (#10910)
* wip

* wip

* Update QueueService.ts

* wip

* refactor

* ✌️

* fix

* Update QueueStatsService.ts

* refactor

* Update ApNoteService.ts

* Update mock-resolver.ts

* refactor

* Update mock-resolver.ts
2023-05-29 11:54:49 +09:00
tamaina 4129ac157a package.jsonの並び替えを修正 2023-05-25 14:50:14 +00:00
syuilo 1de774fa3d update deps 2023-05-24 10:16:42 +09:00
Acid Chicken (硫酸鶏) 81fd94e635
chore: update slacc (#10867)
Co-authored-by: syuilo <Syuilotan@yahoo.co.jp>
2023-05-20 10:34:31 +09:00