Commit graph

3790 commits

Author SHA1 Message Date
Ben Rog-Wilhelm
3d27696210
Tweak a field name to hopefully slow some spambots. 2025-01-11 12:14:50 -06:00
Ben Rog-Wilhelm
3002426974 Remove reports a little more aggressively. 2024-08-08 15:31:13 -05:00
Ben Rog-Wilhelm
208f9974f9 Suppress reports created by shadowbanned users. 2024-08-08 07:58:52 -05:00
Ben Rog-Wilhelm
f3df5cda26 Remove shadowban alt virality. 2024-05-21 23:03:48 -05:00
Ben Rog-Wilhelm
5ab013fb4a Fix: Nuke-user option broken. 2024-01-31 13:30:43 -06:00
Walter Miller
a856dcbf3b
Fix notifications from blocked users (#711) 2023-11-08 06:45:08 -06:00
Ben Rog-Wilhelm
fc8834950e Fix: HCaptcha broken. 2023-10-12 12:41:45 -05:00
Ben Rog-Wilhelm
c5d380afb1 Fix: Add CSP for hcaptcha. 2023-10-12 12:16:58 -05:00
Ben Rog-Wilhelm
6078b2e697 Fix: Tabs in the content header breaks nginx. 2023-09-11 04:34:27 -05:00
Ben Rog-Wilhelm
9edfb64c08 Actually clean this up *properly*. 2023-09-11 04:00:58 -05:00
Ben Rog-Wilhelm
b345a62dbb
Bring the CSP up to standard. (#699) 2023-09-11 02:56:39 -05:00
Viet Than
e7926952b3
🏦 Database Change: convert created utc to datetimez for viewers (#697)
* passed the test

* this works better

* Remove commented-out code.

* Remove commented-out code.

---------

Co-authored-by: Ben Rog-Wilhelm <zorba-github@pavlovian.net>
2023-09-11 02:45:17 -05:00
Ben Rog-Wilhelm
7b12fba945
Clean up CSP a little more to work properly with Analytics. (#698) 2023-09-11 02:24:16 -05:00
Ben Rog-Wilhelm
41497958b6 Clean up a few minor code quality issues in the chat system. 2023-09-04 15:28:25 -05:00
Ben Rog-Wilhelm
310c6c4424
Rig up chat to be suitable for a Doge election. (Hopefully.) (#692)
* Integrate chat from upstream

Substantially borrowed from upstream ref: 13a208ee88e55 (before they
started editing generated artefacts instead of source).

Integrated, including:
  - Remove previously removed features: emoji, hats, and name colors
  - Compensate for lack of unified root template
  - Add React build process to Dockerfile and `bootstrap/init.sh`
  - Preliminary integration of chat websocket workers

For testing, modify `supervisord.conf.dev` to put chat on port 80 and
the site service on some other port. Then visit: http://localhost/chat

Still to do:
  - Access control for specific small-groups (and admins probably):
    Set the values somewhere (site_settings.json? Redis?) and use for
    authorization in `chat_is_allowed`.
  - Proxying only /chat to the websocket workers
  - Chat persistance across restarts: either Redis devops or to DB

* Add nginx server to do appropriate redirection.

* Add necessary columns to User.

* Wire up chat permissions.

* Reload chat on source change.

* Add a better structure for slash commands and add/remove functionality.

* Stop putting up previews of slash commands.

* We require more whitespace.

* Strip DMs out entirely, I currently do not want to deal with them.

* Change "Users Online" to just "Users".

* Clean up a little more DM detritus.

* Save chat history in database.

* Remove unnecessary hefty query to the DB.

* Clean up optimistic messages.

* Initial implementation of notification icon.

* Update readme a little bit.

* Fix notification highlight (mostly).

* Remove chat version number that will never be updated.

* Fix: Errors on logged-out users.

* Add function to nuke the chat state.

* Update DB.

* Add a dedicated deployable docker image.

* Fix: init_build.sh execute bit not set.

* Whoops, screwed up the abort() call.

* Relax chat rate limiter.

* Remove a somewhat silly comment.

* Remove an unnecessary g.db.add().

---------

Co-authored-by: TLSM <duolsm@outlook.com>
2023-09-04 12:42:20 -05:00
Viet Than
4f8ba42738
🏦 Database Change: convert created utc to datetimez for volunteer_janitor (#679) 2023-08-25 01:00:09 -05:00
Ben Rog-Wilhelm
2adae47b19 Stop deleting notifications to private messages after reply. 2023-08-09 02:50:55 -05:00
justcool393
335f19f561
excise country club (#665) 2023-08-08 23:51:39 -05:00
Ben Rog-Wilhelm
b557812e07 Ensure that Janitor comments are visible; ensure that Janitor comments aren't replies to the user. 2023-08-08 23:49:30 -05:00
Viet Than
15f387f109
🏦 Database Change: convert created utc to datetimez for votes (#670) 2023-08-02 22:16:29 -05:00
Viet Than
e1075eb722
🏦 Database Change: convert created utc to datetimez for notifications (#668) 2023-08-02 21:35:05 -05:00
Viet Than
34b328583c
🏦 Database Change: convert created utc to datetimez for modactions (#667) 2023-08-02 17:37:38 -05:00
Viet Than
356f7e2f41
🏦 Database Change: convert created utc to datetimez for follows (#666) 2023-08-02 17:36:16 -05:00
justcool393
2f0ed92318 Standards recommend we use HTTP headers for our CSP
Let's do that.
2023-07-28 05:16:51 -05:00
justcool393
614d94652c increase length limit for comments from 10k to 50k unfiltered or 500k filtered 2023-07-28 05:16:08 -05:00
justcool393
46714fd520
rename truecoins -> truescore (#544) 2023-07-28 04:56:49 -05:00
justcool393
c6d3cbdba9
user private profile restrictions (#652) 2023-07-27 06:07:04 -05:00
justcool393
b4b3e03dc7 there was a typo introduced when the new statemod system was introduced. we fix that. 2023-07-24 07:35:24 -05:00
justcool393
a3180fad2a
Make commenting the default (#646) 2023-07-24 06:07:17 -05:00
justcool393
7e68277eb6
Don't show users post content from users they've blocked (#639) 2023-07-22 19:47:44 -05:00
justcool393
672745ee6c
combine 5 different post/comment filter state adjustment routes (#637) 2023-07-22 19:34:08 -05:00
justcool393
a2aa7353fc
fix the stats page (#630) 2023-07-20 20:19:22 -05:00
justcool393
8191d5a4cf
rename fullnames
Handle a couple places with `t3_` that persisted from code movement.
on master after time of branch.

Then, fix commenting, which used inaccurate fullname parsing logic.
2023-07-13 14:37:28 -05:00
justcool393
231c0f420f
Refactor auth forms (#624) 2023-07-13 11:50:26 -05:00
TLSM
6fde14a92c Use reddit-style notifs without context
The notifications schema is already set up for reddit-style
chronological notifications. We simply have to remove the logic that
builds the context and patch up a few places in the frontend that
were expecting full reply trees.

`Comment.header_msg` previously expected the user's own comment to
be top-level in comment replies. Logic is revised to expect the actual
reply.

`files.routes.front.notifications_main` now has reduced query volume
because we aren't expiring the session when marking notifications read.
This also allows us to remove the unused `comms` variable, which is a
makeshift "pattern" of storing duplicate database replies across a
commit so the templates don't requery (thus losing data attached to
the runtime object, like `c.unread` / `c.notif_utc`).

We move the `is_notification_page` flag to the route callers rather
than templates checking `request.path`.

Minor UI style: "Clear all notifications" -> "Mark All Read", since
this was a persistent point of user confusion upstream, with people
expecting their inbox to empty out. Also less margin between notifs
to be consistent with tighter comment display elsewhere and removed
need to separate groups of comments vs single comments.
2023-07-12 00:24:50 -05:00
TLSM
695e6b6dbd Split notification routes, hard wrap, sort order
Change the notifications subpages to be distinct route handlers with
actual paths rather than query parameters. They already were a massive
conditional chain with almost no common logic.

Hard wrap some of the more egregious query lines. Use less duplicated
code for shadowban exclusion.

Only major functionality change which is somewhat related to #476 is
to sort subtrees by Comment.id DESC. Otherwise, upstream is
substantially the same as TheMotte. Given that upstream didn't
experience #476, I think the issue may have been resolved by prior
changes to filtering / comment visibility & moderation.
2023-07-12 00:24:50 -05:00
TLSM
edafe22024 Remove unused reddit mentions notifications
In the distant past, the codebase would check pushshift for keyword
mentions and generate notifications to admins about them. I can't
find where we removed it, but I don't think it was ever operative.

Since these notifications don't get generated, we don't need a
notifications page for them.
2023-07-12 00:24:50 -05:00
Ben Rog-Wilhelm
ccf809406e Rejigger the Mod/Report state system. 2023-07-01 21:06:40 -05:00
Ben Rog-Wilhelm
2f0a3fc278 Terminology change: instead of "banning" comments or posts, remove them. 2023-06-23 22:32:11 -05:00
Ben Rog-Wilhelm
c610c60dc0 Fix: Datetime behavioral issues. 2023-06-23 21:30:19 -05:00
Ben Rog-Wilhelm
5271e7c943 Move 'deleted_utc' into 'state_user_deleted_utc' and change types. 2023-06-23 21:30:19 -05:00
Ben Rog-Wilhelm
e9ca6e3239 Filter out reports from permabanned users. 2023-06-03 18:41:48 -05:00
Ben Rog-Wilhelm
9d264dcf3a Implement mod-viewable janitor-generated badness stats. 2023-04-30 02:08:07 -05:00
justcool393
688cd91e83 perms: consistently use >= for admin levels
places that use the PERMS constant do it and this way makes it clearer
what admin level is required to perform an action.
2023-04-06 07:36:19 -06:00
justcool393
3c056d3410 kitchen sink formatting pass 2023-04-03 03:30:57 -06:00
justcool393
39ce6a4ee9
invisibleify completely removed trees only (fixes #431) (#535)
* invisibleify completely removed trees only (fixes #431)

* fix visibility state for shadowbanned users.
this also ends up moving some of the complexity out of the templates.

* comments: remove unused variable

* moderation state machine

* no seriously this really should check for v not being None

* fix shadowban state

* fix visibility state

* update stateful counters

* don't use bespoke function for show_descendants

* properly mock ModerationState for cron submissions

* fix approval discrepency

* remove treenukes for removed comments

* show shadowbans as removed
2023-04-03 04:30:46 -05:00
justcool393
77af24a5b1
remove holes (#492)
* remove holes

* don't import class that doesn't exist

* remove subs in template code

* remove subs_created

* fix sticky bug

* uh... i think this will fix it????

* fix stupid nearly ungrokkable nesting error

* ...

* ....

* ....

* *sigh*

* .............................i think i got it.

* Revert ".............................i think i got it."

This reverts commit 419a545875.

* Revert "*sigh*"

This reverts commit fcfc9d7995.

* Revert "...."

This reverts commit e200c8f6f0.

* Revert "...."

This reverts commit 681db8cb02.

* Revert "..."

This reverts commit c54372b9ff.

* Revert "fix stupid nearly ungrokkable nesting error"

This reverts commit e202fd774c.

* Revert "uh... i think this will fix it????"

This reverts commit e4d9366093.

* readd missing endif

* fix email templates.

* fix frontpage listing

* some minor fixes wrt saving

* fix some listing errors

* Remove more references to holes system

A couple of these came from the merge of #554. A few others were just
left in the templates and presumably hard to catch on the first
removal pass.

* remove unnecessary lazy

* Add migration

Tested. Very sensitive to order. I wound up borrowing the statement
order we used for deleting sub rows on upstream (manually, of course).

---------

Co-authored-by: TLSM <duolsm@outlook.com>
2023-04-01 00:13:30 -05:00
Snakes
1cf017c42a
Fix leaderboard 500 on production (NotImplementedError) (#563)
* leaderboard: correct LB set when !ENABLE_SERVICES

* leaderboard: fix NotImplementedError

UserBlockLeaderboard did not, in fact, implement `value_func`. Nor did
its superclass. The bug was replicated by having at least one UserBlock
in the test data.
2023-03-29 17:45:28 -05:00
justcool393
be952c2771
post scheduling (#554)
* prepare codebase to create scheduled tasks

there is some prep work involved with this. the scheduler would be happy
 if this work was done. simply, we extract out the `created_utc`
 interface from *everything* that uses it such that we don't have to
 repeat ourselves a bunch. all fun stuff.

next commit is the meat of it.

* cron: basic backend work for scheduler

* avoid ipmort loop

* attempt 2 at fixing import loops

* parathensize because operator precedence

* delete file that came back for some reason.

* does NOPing the oauth apps work?

* import late and undo clients.py change

* stringify column names.

* reorder imports.

* remove task reference

* fix missing mapper object

* make coupled to repeatabletask i guess

* sanitize: fix sanitize imports

* import shadowing crap

* re-shadow shadowed variable

* fix regexes

* use the correct not operator

* readd missing commit

* scheduler: SQLA only allows concrete relations

* implement submission scheduler

* fix import loop with db_session

* get rid of import loop in submission.py and comment.py

* remove import loops by deferring import until function clal

* i give up.

* awful.

* ...

* fix another app import loop

* fix missing import in route handler

* fix import error in wrappers.py

* fix wrapper error

* call update wrapper in the admin_level_required case

* :marseyshrug:

* fix issue with wrapper

* some cleanup and some fixes

* some more cleanup

let's avoid polluting scopes where we can.

* ...

* add SCHEDULED_POSTS permission.

* move const.py into config like the other files.

* style fixes.

* lock table for concurrency improvements

* don't attempt to commit on errors

* Refactor code, create `TaskRunContext`, create python callable task type.

* use import contextlib

* testing stuff i guess.

* handle repeatable tasks properly.

* Attempt another fix at fighting the mapper

* do it right ig

* SQLA1.4 doesn't support nested polymorphism ig

* fix errenous class import

* fix mapper errors

* import app in wrappers.py

* fix import failures and stuff like that.

* embed and import fixes

* minor formatting changes.

* Add running state enum and don't attempt to check for currently running tasks.

* isort

* documentation, style, and commit after each task.

* Add completion time and more docs, rename, etc

* document `CRON_SLEEP_SECONDS` better.

* add note about making LiteralString

* filter out tasks that have been run in the future

* reference RepeatableTask's `__tablename__` directly

* use a master/slave configuration for tasks

the master periodically checks to see if the slave is alive, healthy,
and not taking too many resources, and if applicable kills its
child and restarts it.

only one relation is supported at the moment.

* don't duplicate process unnecessarily

* note impl detail, add comments

* fix imports.

* getting imports to stop being stupid.

* environment notes.

* syntax derp

* *sigh*

* stupid environment stuff

* add UI for submitting a scheduled post

* stupid things i need to fix the user class

* ...

* fix template

* add formkey

* pass v

* add hour and minute field

* bleh

* remove concrete

* the sqlalchemy docs are wrong

* fix me being dumb and not understanding error messages

* missing author attribute for display

* author_name property

* it's a property

* with_polymorphic i think fixes this

* dsfavgnhmjk

* *sigh*

* okay try this again

* try getting rid of the comment section

* include -> extends

* put the div outside of the thing.

* fix user page listings :/

* mhm

* i hate this why isn't this working

* this should fix it

* Fix posts being set as disabled by default

* form UI imrpovements

* label

* <textarea>s should have their closing tag

* UI fixes.

* and fix errenous spinner thing.

* don't abort(415) when browsers send 0 length files for some reason

* UI improvements

* line break.

* CSS :S

* better explainer

* don't show moderation buttons for scheduled posts

* ...

* meh

* add edit form

* include forms on default page.

* fix hour minute selectino.

* improve ui i guess and add api

* Show previous postings on scheduled task page

* create task id

* sqla

* posts -> submissions

* fix OTM relationship

* edit URL

* use common formkey control

* Idk why this isn't working

* Revert "Idk why this isn't working"

This reverts commit 3b93f741df.

* does removing viewonly fix it?

* don't import routes on db migrations

* apparently this has to be a string

* UI improvements redux

* margins and stuff

* add cron to supervisord

* remove stupid duplication

* typo fix

* postgres syntax error

* better lock and error handling

* add relationship between task and runs

* fix some ui stuff

* fix incorrect timestamp comparison

* ...

* Fix logic errors blocking scheduled posts

Two bugs here:
  - RepeatableTask.run_time_last <= now: run_time_last is NULL by
    default. NULL is not greater than, less than, or equal to any
    value. We use NULL to signify a never-run task; check for that
    condition when building the task list.
  - `6 <= weekday <= 0`: there is no integer that is both gte 6 and
    lte 0. This was always false.

* pasthrough worker process STDOUT and STDERR

* Add scheduler to admin panel

* scheduler

* fix listing and admin home

* date formatting ixes

* fix ages

* task user interface

* fix some more import crap i have to deal with

* fix typing

* avoid import loop

* UI fixes

* fix incorrect type

* task type

* Scheduled task UI improvements (add runs and stuff)

* make the width a lil bit smaller

* task runs.

* fix submit page

* add alembic migration

* log on startup

* Fix showing edit button

* Fix logic for `can_edit` (accidentally did `author_id` instead of `id`)

* Broad review pass

Review:
  - Call `invalidate_cache` with `is_html=` explicitly for clarity,
    rather than a bare boolean in the call args.
  - Remove `marseys_const*` and associated stateful const system:
    the implementation was good if we needed them, but TheMotte
    doesn't use emoji, and a greenfield emoji system would likely
    not keep those darned lists floating in thread-local scope.
    Also they were only needed for goldens and random emoji, which
    are fairly non-central features.
  - Get `os.environ` fully out of the templates by using the new
    constants we already have in files.helpers.config.environment.
  - Given files.routes.posts cleanup,get rid of shop discount dict.
    It's already a mapping of badge IDs to discounts for badges that
    likely won't continue to exist (if they even do at present).
  - RepeatableTaskRun.exception: use `@property.setter` instead of
    overriding `__setattr__`.

Fix:
  - Welcome message literal contained an indented Markdown code block.
  - Condition to show "View source" button changed to show source to
    logged out. This may well be a desirable change, but it's not
    clearly intended here.

* Fix couple of routing issues

* fix 400 with post body editing

* Add error handler for HTTP 415

* fix router giving wrong arg name to handler

* Use supervisord to monitor memory rather than DIY

Also means we're using pip for getting supervisord now, so we don't rely
on the Debian image base for any packages.

* fix task run elapsed time display

* formatting and removing redundant code

* Fix missing ModAction import

* dates and times fixes

* Having to modify imports here anyway, might as
well change it.

* correct documentation.

* don't use urlunparse

* validators: import sanitize instead of from syntax

* cron: prevent races on task running

RepeatableTask.run_state_enum acts as the mutex on repeatable tasks.
Previously, the list of tasks to run was acquired before individually
locking each task. However, there was a period where the table is both
unlocked and the tasks are in state WAITING between those points.
This could potentially have led to two 'cron' processes each running the
same task simultaneously. Instead, we check for runnability both when
building the preliminary list and when mutexing the task via run state
in the database.

Also:
  - g.db and the cron db object are both instances of `Session`, not
    `scoped_session` because they are obtained from
    `scoped_session.__call__`, which acts as a `Session` factory.
    Propagate this to the type hints.
  - Sort order of task run submissions so /tasks/scheduled_posts/<id>
    "Previous Task Runs" listings are useful.

* Notify followers on post publication

This was old behavior lost in the refactoring of the submit endpoint.

Also fix an AttributeError in `Follow.__repr__` which carried over
from all the repr copypasta.

* Fix image attachment

Any check for `file.content_length` relies on browsers sending
Content-Length headers with the request. It seems that few actually do.

The pre-refactor approach was to check for truthiness, which excludes
both None and the strange empty strings that we seem to get in absence
of a file upload. We return to doing so.

---------

Co-authored-by: TLSM <duolsm@outlook.com>
2023-03-29 16:32:48 -05:00
justcool393
56087f889e
remove backgrounds (fixes #379) (#536)
* remove backgrounds (fixes #379)

* remove UI elements

* remove gif modals lol

* .

* remove unused gif modal.

* add alembic migration
2023-03-28 13:47:53 -05:00