Commit graph

453 commits

Author SHA1 Message Date
justcool393
1e9ca62892 sanitize: prevent worker crash during timeouts
because themotte is ~~webscale~~ async, there is some window of time
where code in the sanitize fn will cause the entire worker to crash and
not in a fun way. anyway this uses gevent to handle timeouts instead of
a signal based system which is non-portable and is very fragile,
especially if themotte adds more async functionality in (something that
would probably further improve the performance of the site)

essentially... we don't want the failure of one request taking down the
entire worker!
2023-02-10 14:09:25 -06:00
FatherInire
b46ada9f72
Fix some deprecations and factor out a helper function (#387) 2022-10-27 22:15:48 -05:00
Jack Byrne
1b9f7860c5 nicer and more efficient sanitisation 2022-09-11 06:12:26 -05:00
TLSM
256a43527a Fix #303: remove WebP mangling of imgur links. 2022-09-10 08:01:52 -05:00
Julian Rota
f4a8b78d56 Fix an error with trying to sanitize really ugly HTML 2022-08-22 09:55:14 -05:00
Ben Rog-Wilhelm
be0cebe67a Improve signal timeout behavior (from upstream 548030fcf) 2022-08-20 03:56:26 -05:00
Ben Rog-Wilhelm
da19c8cb11 Remove marquee support from the formatting, because, uh, no. 2022-08-07 02:28:35 -05:00
painejohn
cbcc2aac6f
139: Disabled multimedia embedding
This change disables multimedia embedding:

- In comments and comments replies.
- In new submissions.
- In comment & submission preview

And it's all toggle-able via an envvar, except for the JS bits,
but I linked those to the github issue, so should be easy to find
in the future.

The way it works is:

- removes markdown image/video syntax,
  eg. `![](https://example.org/someimage.jpg)` into ``
- changes link text into anchors, eg.
  `https://example.org/someimage.jpg` into
  `[https://example.org/someimage.jpg](https://example.org/someimage.jpg)`
- removes html img/video/audio tags, eg.
  `<img href="https://example.org/someimage.jpg" />` into ``
- when embedding gifs via the giphy modal in "new submission", it will
  insert only an anchor to the gif
- when attaching an image, it will upload the image, then add only an
  anchor to the post/comment body

I tested this manually, but not sure if I got all the test cases. What I
checked was:

- create comment w/ image/video/audio media using markdown -> success
- create comment reply w/ image/video/audio media using markdown ->
  success
- create comment w/ link to img/imgur/youtube/audio -> success
- create comment w/ attachment -> success
- create comment reply w/ attachment -> success
- create comment w/ img/video tag -> success
- create comment reply w/ image/video tag -> success
- create post submission w/ image/video/media using markdown -> success
- create post submission w/ link to img/imgur/youtube/audio -> success
- create post submission w/ attachment -> success
- create post submission w/ giphy gif -> success

Also, updated the formatting page.

Co-authored-by: Ben Rog-Wilhelm <zorba-github@pavlovian.net>
2022-08-07 01:30:47 -05:00
painejohn
4e8fef2ef0 115: Add cap on number of mentions
This caps the number of mentions in a submission or comment to
MENTION_LIMIT, which is set to 100 by default. When limit is exceeded,
returns a helpful message to the user.
2022-08-07 00:54:47 -05:00
Ben Rog-Wilhelm
f789252794 Remove the #fortune feature. 2022-07-23 06:00:38 -05:00
Michael House
8237ef5fc8 Refactored mention sanitization 2022-06-08 07:12:49 -05:00
Michael House
658eacb45d Partial fix for performance issues with mentions 2022-06-07 15:30:27 -05:00
Michael House
f3a479f991 Removed emoji feature from templates and deleted emoji images 2022-05-18 20:53:28 -05:00
FatherInire
a12123ca01
Initial e2e testing
Authored by @FatherInire
2022-05-13 02:55:29 -05:00
Ben Rog-Wilhelm
1ee9c1bfa7
Convert text file line endings to LF. 2022-05-09 07:20:47 -05:00
Aevann1
70a31aa9cb sfd 2022-04-29 17:17:14 +02:00
Aevann1
349ca9e44b sfd 2022-04-28 01:16:24 +02:00
Aevann1
f69f929abb fds 2022-04-27 18:28:00 +02:00
Aevann1
f924e51316 df 2022-04-27 17:15:41 +02:00
Aevann1
963c645092 xcv 2022-04-27 17:09:37 +02:00
Aevann1
e378e55dc7 czx 2022-04-27 17:03:25 +02:00
float-trip
d61222fc35
add :@userpat: emojis (#231)
* refactor emoji formatting

* add user patting
2022-04-27 16:46:47 +02:00
Aevann1
c31515811d gf 2022-04-25 16:51:40 +02:00
Aevann1
3983721cc7 fsd 2022-04-22 17:17:10 +02:00
Aevann1
ba0f4e69f2 fds 2022-04-20 00:24:43 +02:00
Aevann1
ac43373439 gfd 2022-04-19 21:13:36 +02:00
Aevann1
9f5e77139e fds 2022-04-18 20:45:18 +02:00
Aevann1
d833e3916c fsd 2022-04-18 20:25:14 +02:00
Aevann1
85a6d9adb8 fds 2022-04-18 18:01:03 +02:00
Aevann1
85cf3a092a fds 2022-04-18 01:00:17 +02:00
Aevann1
186cf3a528 fds 2022-04-18 00:13:37 +02:00
Aevann1
c042dcc26b fsd 2022-04-17 23:46:29 +02:00
Aevann1
eccfb31469 fds 2022-04-17 22:20:40 +02:00
Aevann1
a26dd97e5f fds 2022-04-17 15:53:00 +02:00
Aevann1
670e065c12 fds 2022-04-17 01:22:48 +02:00
Aevann1
959356164e fds' 2022-04-17 01:06:53 +02:00
Aevann1
4ef1106f4d fsd 2022-04-17 01:00:32 +02:00
Aevann1
50732239b4 fsd 2022-04-17 01:00:21 +02:00
Aevann1
abad5f4f9e fds 2022-04-17 00:42:12 +02:00
Aevann1
494d252144 dfs 2022-04-16 22:16:09 +02:00
Aevann1
e421da5503 fdssfd 2022-04-16 17:30:35 +02:00
Aevann1
4af0c78f8b fsd 2022-04-16 16:58:07 +02:00
Aevann1
ce94cbca5d fsd 2022-04-16 02:18:41 +02:00
Aevann1
57880f658b fds 2022-04-16 01:06:13 +02:00
Aevann1
286bf0aaf0 fds 2022-04-16 00:42:42 +02:00
Aevann1
3028ef5046 fdsdfs 2022-04-16 00:39:17 +02:00
Aevann1
0f1ca229d8 fds 2022-04-10 20:46:55 +02:00
Aevann1
8370cfc037 fds 2022-04-06 23:15:43 +02:00
Aevann1
0fe127af09 dogecore 2022-04-05 17:50:56 +02:00
Aevann1
c1155cb498 I have no idea what I'm doing 2022-04-04 19:23:35 +02:00