forked from rDrama/rDrama
1
0
Fork 0
Commit Graph

1502 Commits (dedbc0296898d27c1c3961d5a3ab428d3bf13299)

Author SHA1 Message Date
Snakes 4ba2098612 Rate limiter: whitelist admins.
Due to presently hitting perpetual 429s after a mishap with lottery
polling on production, among past events where admins have gotten
rate-limited for doing otherwise normal admin behavior, the
flask_limiter.Limiter now has a request filter to whitelist JL2+.
Despite running on every request, I don't anticipate this undermining
the DoS prevention power of the Limiter.

It is yet unknown whether there are edge cases where running
get_logged_in_user in a different spot in the request pipeline might
e.g. subtly break the logged-in counters. This is not expected at
present, however.
2022-05-30 23:01:18 -04:00
Snakes 81e19b1aed Add can_gamble user setting.
Users now have a toggleable can_gamble setting which disables their
ability to use all chance-based gains on the site: viz. slots,
blackjack, the lottery, and treasure chests.

This only applies on invocation of commands that start gambling
games, so it should cause no bugs when toggled with e.g. active
blackjack games.

This was added for the benefit of users with actual problems with
gambling, be they past addiction or religious conviction. All future
gambling features are humbly requested to respect it.
2022-05-30 05:32:45 -04:00
outruncolors 0abf890575 Make a few styling changes for mobile lottery modal (#293) 2022-05-30 01:40:55 -04:00
Snakes cf46b8b3fe Refactor e81edb711d for modularity. 2022-05-30 00:30:10 -04:00
Aevann1 e81edb711d fixed this https://rdrama.net/post/72013/-/2010109?context=8#context 2022-05-30 06:12:51 +02:00
Outrun Colors, LLC ef7da60432 Remove new schema changes from file and replace account ids for lottery system 2022-05-29 22:17:31 -05:00
Outrun Colors, LLC db13e0976c Have tickets show up in treasure chests 2022-05-29 21:59:22 -05:00
Outrun Colors, LLC b9dc28e6d1 Don't show lotteries on the sister sites 2022-05-29 20:43:16 -05:00
Outrun Colors, LLC a0cc7e1cf6 Move more stuff to proper location 2022-05-29 19:49:14 -05:00
Outrun Colors, LLC 562202b38d Reorganize route logic 2022-05-29 01:06:39 -05:00
Outrun Colors, LLC bef0b0ff6d Add participants and field updating 2022-05-29 01:01:45 -05:00
Outrun Colors, LLC 1a55a7670e Send notifications to winners and losers 2022-05-28 23:23:20 -05:00
Outrun Colors, LLC 469c39dca6 Configure admin section and purchasing a ticket full flow 2022-05-28 22:33:44 -05:00
Aevann1 709c756660 fds 2022-05-28 16:55:22 +02:00
Aevann1 cd2380fb33 fds 2022-05-28 04:20:31 +02:00
Aevann1 3f04c69cb8 fds 2022-05-28 01:50:33 +02:00
Aevann1 6b6e2e8253 sfd 2022-05-27 20:28:54 +02:00
Aevann1 db98b4e140 sfd 2022-05-27 19:19:12 +02:00
Aevann1 384afb125a fsd 2022-05-27 17:28:30 +02:00
Snakes 2bde3650d4 Awards: enable lootbox on WPD, refactor AWARDS2 logic. 2022-05-26 22:12:53 -04:00
Aevann1 758a30e166 fsd 2022-05-26 22:53:24 +02:00
Aevann1 d4f7f5497b fds 2022-05-26 22:49:36 +02:00
Aevann1 630996faee gfd 2022-05-26 22:31:08 +02:00
Aevann1 f72015382a crgd is a king 2022-05-26 22:04:39 +02:00
Aevann1 64c3b489e3 fds 2022-05-26 20:37:10 +02:00
Aevann1 2595706b49 fsd 2022-05-26 20:36:37 +02:00
Aevann1 e4893c617e fd 2022-05-26 02:54:05 +02:00
Aevann1 163267c88c Revert "Add Y'all Seein' Eye award."
This reverts commit a0f441a67d.
2022-05-26 02:51:42 +02:00
Snakes a0f441a67d Add Y'all Seein' Eye award.
Adds award to enable viewing profile visitors for non-mops and
non-patrons. This commit should encompass all frontend, backend, and
database changes necessary. Perhaps usable as a model for other
user upgrade flag awards.
2022-05-25 19:44:34 -04:00
Aevann1 50b995d3a0 fds 2022-05-25 22:16:26 +02:00
Aevann1 49c53cb2ff fds 2022-05-25 20:59:24 +02:00
Aevann1 c213451722 fdsfdsxc 2022-05-25 20:44:43 +02:00
Aevann1 386db76c10 crgd is a king 2022-05-25 20:29:22 +02:00
Aevann1 5b1477acfc certified good commit 2022-05-25 19:01:29 +02:00
Aevann1 de176280c8 e 2022-05-25 17:42:30 +02:00
Aevann1 162bf9dad7 no more g.timestamp y'all couldn't behave 2022-05-25 17:42:04 +02:00
Snakes 67796acc11 Fix chat by setting g.timestamp.
The users online count recently added to wrappers.py:get_logged_in_user
uses g.timestamp for its calculations. This is primarily set in
__main__.py:before_request. However, chat has requests which do not
trigger @app.before_request. To resolve this, we now set g.timestamp
in the auth_required wrapper before calling get_logged_in_user().

I think this is safe in general; there's no particular harm to setting
the timestamp _more_ frequently.
2022-05-25 06:49:02 -04:00
Snakes 1c7458e111 Sanitize: modularize normalize_url, fix streamable.
Originally prompted by https://rdrama.net/post/18459/-/1984609 which
noticed that streamable.com/e/ links as posts would have another e/
added to them. This was in spite of logic in posts.py api_is_repost
and submit_post designed to specifically counteract this.
Proximal cause was a copypasta'd url.replace(...) chain which
caused the mistake before the streamable-specific logic had a chance
to avoid making it.

Solution: remove the streamable replacement from the chained statement
and create `helpers.normalize_url(url)` to get rid of the copypasta.
2022-05-25 04:43:16 -04:00
Snakes 7ead30014c Upgrade bleach to 5.0.0. 2022-05-24 20:28:36 -04:00
Aevann1 826f137a5e fsd 2022-05-25 02:22:09 +02:00
Snakes 8c3b6cece1 Add 8-ball answers, like fortune & factcheck. 2022-05-24 19:08:41 -04:00
Aevann1 4f02a72d29 fd 2022-05-25 00:43:49 +02:00
Aevann1 1734137dcd sfddsa 2022-05-25 00:29:15 +02:00
Aevann1 6631777f76 fds 2022-05-24 22:45:34 +02:00
Aevann1 e1f298deb8 sfd 2022-05-24 22:27:27 +02:00
Aevann1 2b9dcb0c6a users here now 2022-05-24 22:19:18 +02:00
Aevann1 ca18dc8bdd webm2 2022-05-24 22:09:45 +02:00
Aevann1 67b4f13d98 webm 2022-05-24 22:07:04 +02:00
Snakes d0d029a78a sanitize: Add more neo-gTLDs to TLDs tuple-list.
Per https://rdrama.net/post/70341/-/1976650 added more gTLDs that
are actually desired by site users.

Also, hard wrapped the `TLDS` and `allowed_tags` tuple-lists at a
100char hard ruler for my sanity.
2022-05-24 15:16:55 -04:00
Aevann1 bbd851210e fds 2022-05-24 17:32:49 +02:00
Aevann1 dcf1c794cc fds 2022-05-24 04:48:50 +02:00
Snakes a56ebc39dd Add 'moe' to sanitize TLDS for linkifier. 2022-05-23 16:06:01 -04:00
Aevann1 15418ec1e6 sfd 2022-05-23 21:20:58 +02:00
Aevann1 9599a7e96d fds 2022-05-23 21:13:33 +02:00
Aevann1 0bd15d3914 burgers? 2022-05-23 21:00:14 +02:00
Aevann1 89c27efd79 booba 2022-05-23 20:03:59 +02:00
Aevann1 c5413e9e53 sdf 2022-05-23 17:28:23 +02:00
Snakes cc75375c82 Un-deploy Birthgay event.
Removes temporary changes for the Birthgay 2022 event, ending
approximately at 2022-05-23 0600Z. Changes:
 - Double XP disabled.
 - Lootboxes disabled.
 - Three event awards given real descriptions and colors.
 - Partyhats: restored to cakeday-only condition and tooltip.
 - Header UI: balloons removed, text visibility outline removed,
   journoid banner reverted, marseyjam as header icon.
 - Birthgay banners: removed from template, moved to new storage dir.

Confetti, though remaining as a permanent award, has been temporarily
removed pending a less performance-intensive implementation and one
that doesn't require maintaining a third-party package in the codebase.
2022-05-23 01:48:25 -04:00
Aevann1 649f8d5323 vdffsd 2022-05-23 00:45:04 +02:00
Aevann1 0805b41394 fds 2022-05-23 00:37:59 +02:00
Aevann1 0a74a98ec5 big ass commit 2022-05-23 00:15:29 +02:00
Aevann1 3741b6caa2 fds 2022-05-22 22:14:51 +02:00
Aevann1 112a2679cc fsd 2022-05-22 22:05:44 +02:00
official-techsupport 36e0ce6e0a Handle invalid video formats better (#283) 2022-05-22 22:01:10 +02:00
Aevann1 3ae131f5d6 fds 2022-05-22 20:04:22 +02:00
Aevann1 d712b8cf94 fds 2022-05-22 20:04:11 +02:00
Aevann1 c41f6977e7 sdf 2022-05-22 20:03:54 +02:00
Aevann1 a4ca9fc1aa fds 2022-05-22 18:19:57 +02:00
Aevann1 10723940d1 sfd 2022-05-22 18:19:49 +02:00
Aevann1 969d1898b5 vid refactor 2022-05-22 18:13:19 +02:00
Aevann1 37a6ce39f5 fixing https://rdrama.net/post/69817/tfw-you-will-never-troll-harder/1961118?context=8#context 2022-05-22 12:20:11 +02:00
Snakes 3d9c302fae Blackjack: add five card charlie rule. 2022-05-20 23:08:20 -04:00
Snakes 9a23c195ed Fix overpermissive email regex. 2022-05-20 18:49:00 -04:00
Aevann1 2737a6ca47 sfd 2022-05-20 23:41:08 +02:00
Snakes 76fd1342f3 Fix @mention replacement.
Comments of the style e.g. "@TLSM / @TLSM2" would mistakenly be
`sanitize`d to have identical links only on "@TLSM", the latter
instance having a dangling 2 on the end. It seems this is purely an
issue with text formatting; alerts.py @ NOTIF_USERS had no such
issues. The root cause appears to be partly an optimization and
partly the use of str.replace without a count limit.
2022-05-20 17:04:36 -04:00
Aevann1 4a6545ef5d dfsfds 2022-05-20 16:39:46 +02:00
Aevann1 eead5570e5 fsd 2022-05-20 16:17:09 +02:00
Snakes c789f6923e Merge remote-tracking branch 'upstream/frost' into birthgay-staging 2022-05-19 17:59:35 -04:00
Snakes 5e85f34d3c Double XP enabled: actual launch timestamp. 2022-05-19 17:22:55 -04:00
Snakes 39c354c3fd Enable DXP at 2022-05-19 2200Z. 2022-05-19 17:15:39 -04:00
Snakes 69dec16f55 Shop badge discount: fix Spender, add Roller disc.
The shop discount from Big Spender badges was incorrectly implemented:
intended behavior was for 2pp per badge. However, the values in
const.py were set as if a user could only have one Spender badge at
once, while user.py @ discount was implemented as if they were
additive. Since users factually do have multiple big spender badges,
the values in const were adjusted to reflect this fact.

Also, lootbox Roller badges now each offer a 1pp discount.
users.py @ discount was improved to check against the `discounts`
keys for appropriate badges, rather than a hardcoded list.
2022-05-19 13:41:04 -04:00
Aevann1 44cd7f4a92 fds 2022-05-19 09:49:15 +02:00
Aevann1 15f0b963c7 fc 2022-05-18 20:45:04 +02:00
Snakes f0c9a354e9 Implement better double XP infrastructure.
Double XP now has a constant for unixtime to start. Logic around
DXP is designed to only apply to votes made after DOUBLE_XP_ENABLED.
This prevents an exploit in the old implementation where spam voting/
unvoting a post made prior to the DXP start could farm 300 DC/hr/alt.
Also it's more maintainable and comports with the coin_delta changes
to prevent self-vote coin changes.
2022-05-18 00:54:05 -04:00
Snakes b51ab09b27 Lootboxes: re-enable for birthgay, improve.
Re-enable lootboxes in const.py, and update their contents in
awards.py. Additionally, improve appearance in shop.

Upon purchasing a lootbox, users now receive a message informing
them of the contents thereof.

Lootbox backend now properly uses CARP_ID (and checks for the
existence thereof correctly).

Also, minor changes to how const.py whitelists awards.
2022-05-17 22:10:04 -04:00
Snakes f9bfb6ddc6 Update birthgay award descs, ricardo price. 2022-05-17 20:04:16 -04:00
Aevann1 c3cce7aaa5 Merge branch 'frost' of https://github.com/Aevann1/Drama into frost 2022-05-17 21:58:43 +02:00
Aevann1 3491c9187d pls review 2022-05-17 21:58:41 +02:00
HappyDOGE e7349aec98 Fix <a> tag link injection, don't throw a ValueError when href attr is missing, properly count marseys (their usage wasn't counted for 20 days :marseygasp:) (#265) 2022-05-17 20:59:07 +02:00
Snakes 9854ed863f Revert word filter * 'escapes'. 2022-05-17 14:34:54 -04:00
Aevann1 ea7c4f833a fg 2022-05-17 18:53:44 +02:00
Aevann1 c80dcaf706 sfd 2022-05-17 18:16:56 +02:00
Aevann1 e0c1e6b4cd sfd 2022-05-16 22:57:47 +02:00
Snakes 42e0b77ca7 Add <audio> support to sanitize.py.
Parallels the decisions made with <video>.
2022-05-15 18:47:37 -04:00
Aevann1 50b1ed8aa0 fds 2022-05-15 10:45:57 +02:00
Aevann1 ed0d225554 sfd 2022-05-14 15:11:11 +02:00
Absinthe a829b156d7 #Factcheck Replies (#262)
Replies for #factcheck.
2022-05-12 16:21:20 +02:00
Absinthe c3ae481048 #factcheck (#261)
Like #fortune but to check facts.
2022-05-12 16:21:11 +02:00
DrTransmisia ba1a5358c8 Bussysussy (#258)
* LE SCHIZOPHRENIC ID HAS ARRIVED :MARSEYCRAZYTROLL:

* other batch of tags
2022-05-11 13:05:32 +02:00
Aevann1 fac797006e sf 2022-05-10 14:14:09 +02:00
Aevann1 9bd8fcbd1c sf 2022-05-10 09:20:49 +02:00
Aevann1 b71ae6cc74 sf 2022-05-09 13:21:49 +02:00
TLSM 607e5c0171 Fix blackjack doubledown & insure using wrong currency. (#253)
In blackjack, the new double-down and insurance features erroneously
always used coins, even when gambling with mbux.
2022-05-09 01:51:00 +02:00
geese 507d4929f7 brasil #1 2022-05-08 13:37:30 -04:00
Aevann1 9a7c8f813f sfd 2022-05-08 11:06:01 +02:00
Aevann1 666870e0a3 fsd 2022-05-08 07:14:24 +02:00
Aevann1 4cc4f8f14f sfd 2022-05-08 06:01:42 +02:00
Aevann1 028563ad7d bgd 2022-05-07 08:04:14 +02:00
Aevann1 1b86af8def fg 2022-05-07 07:28:51 +02:00
Aevann1 f2039d7713 sfd 2022-05-07 06:13:19 +02:00
Aevann1 f876092e9e dg 2022-05-06 01:45:41 +02:00
Aevann1 22c2e1240e jh 2022-05-06 01:44:30 +02:00
Aevann1 bb43be278b dg 2022-05-05 23:49:27 +02:00
TLSM 1137d56de7 Disable chudtexting in quotes. (#245)
Chose to split text into lines because Python regex supports neither
variable-width nor infinite-width negative lookbehinds. This precludes
a simple pure regex solution. Since all replacements are done at the
word level, this has no obvious ill effects.
2022-05-05 22:47:13 +02:00
TLSM 110278d87f Add typekit to approved hosts. (#243) 2022-05-05 09:57:34 +02:00
carpathianflorist 902a8fa7e3 minor word filter update 2022-05-05 00:19:59 -04:00
geese 02928305ed aaa 2022-05-04 21:29:59 -04:00
Aevann1 6b10d097a2 mn 2022-05-05 01:09:46 +02:00
Aevann1 024e5770af fsd 2022-05-04 22:51:56 +02:00
Aevann1 53702d5f13 dup 2022-05-04 05:14:14 +02:00
Aevann1 572b8bcf65 jk 2022-05-03 21:07:57 +02:00
Aevann1 095e5cb0af sanitize 2022-05-03 21:07:15 +02:00
Aevann1 bb33eaf54b sfd 2022-05-02 22:02:22 +02:00
Aevann1 df90e71f20 fsd 2022-05-02 21:30:12 +02:00
Aevann1 5eb6491e25 fgd\ 2022-05-02 07:06:43 +02:00
Aevann1 94e6eb1ef6 sdf 2022-05-02 00:28:51 +02:00
Aevann1 a4b0565b5a sfd 2022-05-01 23:48:53 +02:00
outruncolors 0ff7bdc28a Added doubledown and insurance functionality (#235)
* Added doubledown functionality

* Add insurance
2022-05-01 20:24:01 +02:00
Aevann1 e73fcbd56a sfd 2022-04-29 17:17:14 +02:00
Aevann1 2d4cf226e4 fds 2022-04-29 16:52:00 +02:00
Aevann1 d0116ff2f8 sfd 2022-04-28 01:16:24 +02:00
Aevann1 952fdec513 fds 2022-04-27 18:28:00 +02:00
Aevann1 47978226e1 df 2022-04-27 17:15:41 +02:00
Aevann1 8296a580d1 xcv 2022-04-27 17:09:37 +02:00
Aevann1 583765f259 czx 2022-04-27 17:03:25 +02:00
float-trip d85951d912 add :@userpat: emojis (#231)
* refactor emoji formatting

* add user patting
2022-04-27 16:46:47 +02:00
Aevann1 2f04364f5b fd 2022-04-26 15:15:01 +02:00
Aevann1 adf6d4bfee sdf 2022-04-26 01:03:07 +02:00
Aevann1 ccff08057a sfd 2022-04-26 01:00:55 +02:00
Aevann1 5c21180705 Revert "vxc"
This reverts commit 4d0c7ba456.
2022-04-25 23:59:12 +02:00
Aevann1 4d0c7ba456 vxc 2022-04-25 18:38:06 +02:00
Aevann1 ddbafe7d78 vcx 2022-04-25 17:48:36 +02:00
Aevann1 e60fe0bcd6 gf 2022-04-25 16:51:40 +02:00
Aevann1 b554065c49 vcx 2022-04-24 19:30:05 +02:00
Aevann1 457a717075 fds 2022-04-24 00:09:25 +02:00
Aevann1 ba503e600f fds 2022-04-23 00:53:24 +02:00
Aevann1 37ecda7872 fds 2022-04-23 00:52:49 +02:00
Aevann1 e384356b33 fsd 2022-04-22 21:41:37 +02:00
Aevann1 e391ef7a29 fds 2022-04-22 21:22:11 +02:00
Aevann1 f6d5fca338 fds 2022-04-22 20:32:11 +02:00