Commit Graph

700 Commits (0f6b36f40b24bf4a32fba75cee230c429b418557)

Author SHA1 Message Date
Aevann 82a73392a9 fix errors 2023-02-26 10:49:09 +02:00
Aevann 8c495c914a default ratelimit doesnt apply implicitly if theres other @limiter.limit before the function, so add it explicity before all functions 2023-02-26 10:41:04 +02:00
Aevann 7aaeedea36 better ratelimiting 2023-02-26 03:42:39 +02:00
Aevann 00c70a23fb show number of emojis and the zip size 2023-02-25 21:18:40 +02:00
Aevann 61d256eaaa adds an easy link to download all emojis 2023-02-25 01:14:18 +02:00
Aevann 7f2d6a29a5 fix 500 error in /contact 2023-02-24 08:53:40 +02:00
Aevann e37031c4dd make sure g.db.flush() is always above _push_notif_thread 2023-02-24 04:36:25 +02:00
Aevann 5a511c00a8 include username in push notifs 2023-02-24 04:22:47 +02:00
Aevann 5d6cb1ba46 add push notifs for modmail 2023-02-24 04:04:11 +02:00
Aevann 52a63fbba3 restore modmail notifs for myself 2023-02-24 01:25:47 +02:00
Aevann e2206278a1 Revert "Revert "routes: added various per-app exclusions (#128)""
This reverts commit f4a4b5f7be.
2023-02-21 16:51:22 +02:00
Aevann f4a4b5f7be Revert "routes: added various per-app exclusions (#128)"
This reverts commit 4e52488b35.
2023-02-20 18:06:51 +02:00
mummified-corroding-granny 4e52488b35 routes: added various per-app exclusions (#128)
Kindly,

Why (at least on WPD):
* /marseys results in a 500 (balls-deep)
* /worldcup... and /directory are empty pages
* /toggle_holes results in almost all posts getting removed from the front page in the perspective of the logged-in user

Thanks,
granny

Reviewed-on: #128
Co-authored-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
Co-committed-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
2023-02-20 14:40:21 +00:00
Aevann 911f183de6 remove csp report code 2023-02-09 06:58:41 +02:00
Aevann df1f2792a1 comment /csp_violations again 2023-02-02 22:47:22 +02:00
Aevann 28dbece47e restore /csp_violations 2023-02-02 22:15:03 +02:00
Aevann 9d244af7f5 increase ratelimit on /csp_violations 2023-02-02 21:33:52 +02:00
Aevann 38fe32703e modify /csp_violations 2023-02-02 21:33:22 +02:00
Aevann c7e565214e comment /csp_violations for now 2023-02-02 21:24:51 +02:00
Aevann ae83aa15ed fix /csp_violations 2023-02-02 19:33:47 +02:00
Aevann 1529e70abd remove /admin/chat for being unused and redundant to /contact 2023-01-30 11:57:00 +02:00
Aevann 17a7430193 fix 500 error 2023-01-29 15:58:11 +02:00
Aevann 477fc73632 rename /send_admin to /contact 2023-01-29 11:23:15 +02:00
Aevann 3b4211e8e1 stop using nullslast #102 2023-01-28 10:25:19 +02:00
Aevann 2c332c5fa7 avoid duplicating err and msg code 2023-01-27 11:41:32 +02:00
Aevann 4c9f27aa1f make /send_admin redirect to /contact 2023-01-27 11:26:59 +02:00
Aevann 6b5f87a638 icons 2023-01-26 07:45:38 +02:00
Aevann e8a61b133f im genuinely stupid 2023-01-25 18:52:16 +02:00
Aevann 5c3eb6989f fix 500 error 2023-01-25 18:06:27 +02:00
Aevann 24edb49f3b add jl5 (for me) 2023-01-22 10:04:49 +02:00
Aevann a40dee5bd8 improve user ratelimiting 2023-01-21 06:39:46 +02:00
Aevann 044664a25e get rid of useless tabs and spaces 2023-01-01 13:36:20 +02:00
Aevann 78351abc4c clean up legacy stuff 2023-01-01 03:17:07 +02:00
Aevann 8ee189022b seething hatred 2022-12-30 21:01:47 +02:00
Aevann c4872ecb07 Revert "attempt to fix ratelimiting user"
This reverts commit 99597fc36c.
2022-12-30 20:43:13 +02:00
Aevann 99597fc36c attempt to fix ratelimiting user 2022-12-30 20:40:58 +02:00
Aevann 9a8c986f93 attempt to fix ratelimiting user 2022-12-30 20:33:07 +02:00
Aevann 56b80d447d remove unnecessary ruqqus holdover 2022-12-29 12:42:08 +02:00
Aevann 909e3f5f29 use a cool flask feature i didnt know about 2022-12-29 12:39:10 +02:00
Aevann c326c999f2 fix csp violation 2022-12-28 12:25:52 +02:00
Aevann 84874ab3ff fix 500 error 2022-12-27 07:40:54 +02:00
Aevann 844c58fe90 dont print /csp_violations when bc of extension 2022-12-27 07:20:32 +02:00
Aevann 6114111654 tighten CSP 2022-12-27 03:22:39 +02:00
Aevann a63b02470d use sets with in statements 2022-12-24 00:22:41 +02:00
Aevann1 1b7eb7cb87 Revert "add print statements for debugging /stats"
This reverts commit a7ec033698.
2022-12-21 01:00:26 +02:00
Aevann1 a7ec033698 add print statements for debugging /stats 2022-12-21 00:50:51 +02:00
Aevann1 74457e5468 rework stats a bit 2022-12-20 04:26:27 +02:00
Aevann1 bee14957a7 increase cache timeout for stats by x10 2022-12-20 02:43:51 +02:00
Aevann1 eee0dfce6a restore /stats 2022-12-20 02:42:39 +02:00
Aevann1 2256fecee6 /stats crashes workers - disable until someone else fixes it (not me) 2022-12-17 20:55:24 +02:00
justcool393 ab41db22b7 [DO NOT MERGE] multiple sub banners (#59)
allows multiple sub banners

Snakes note: By request of Carp, especially for WPD.

Co-authored-by: justcool393 <justcool393@gmail.com>
Co-authored-by: Snakes <duolsm@outlook.com>
Reviewed-on: #59
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-11 23:44:34 +00:00
Aevann1 52f5b2a347 serve almost all files from nginx 2022-12-10 14:21:52 +02:00
Snakes 39a0832223
Sort banned, chudded, etc listings by activity.
The listings of users affected by jannied states are long. To make
them more useful, sort by recent user activity (when v is allowed to
view last_active) to know which accounts are still in use.
2022-12-09 23:47:31 -05:00
Aevann1 c01d757dc7 delete legacy route 2022-12-03 00:37:31 +02:00
justcool393 0106a4e340 antispam: under siege mode 2022-11-30 11:37:35 -06:00
Aevann1 de8a45412b fix /icon.webp 2022-11-30 01:56:11 +02:00
Aevann 9893ede920 fix browserconfig.xml (#30)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: #30
2022-11-29 23:19:03 +00:00
Aevann1 bf1da34dae Revert "marseys table is way way too large to use javascript for sorting, you would've known that if u had tested"
This reverts commit fe0da05415.
2022-11-29 05:22:59 +02:00
Snakes 2304876348
Fix emoji search after Marsey caching revert. 2022-11-28 22:18:16 -05:00
Aevann1 261abe3161 archives - add additional route for ease of use 2022-11-29 05:08:26 +02:00
Aevann1 8182be4730 minor syntax change for no reason 2022-11-29 03:53:30 +02:00
Aevann1 c0d91c9e71 fix last commit (i cant do this without coffee help me) 2022-11-29 01:48:16 +02:00
Aevann1 b6c45c4208 make going to the reddit version of archived posts easier 2022-11-29 01:45:52 +02:00
Aevann1 f15350b2a8 fix subreddit links in archives 2022-11-29 00:12:39 +02:00
Aevann1 fe0da05415 marseys table is way way too large to use javascript for sorting, you would've known that if u had tested 2022-11-28 06:59:35 +02:00
Aevann1 d0047dcc5a include users who have more than 30 days to be unbanned/unchhuded in /banned and /chuds for accountability 2022-11-28 03:32:01 +02:00
justcool393 5a1224ddc7 fix shadowbanned and nonexistent users in marseys table 2022-11-27 11:13:23 -06:00
justcool393 767cc467bb marseys: cache marseys and emojis and fun stuff (#15)
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #15
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-11-27 16:59:36 +00:00
Aevann1 155a5b40c9 excise niggabit's solution for now 2022-11-26 23:04:42 +02:00
justcool393 0ff034b01b add typing to a bunch of routes 2022-11-26 15:00:16 -06:00
justcool393 19b73f8e7e api: fix some missing imports 2022-11-26 14:46:49 -06:00
justcool393 35b1532bb4 admin: remove meme admin vestige 2022-11-25 19:15:39 -06:00
Aevann1 642d19b861 move ratelimit_user after auth 2022-11-26 01:37:04 +02:00
Aevann1 2938f930fd make me not see modmail, if its important the other jannies will tell me 2022-11-25 22:56:11 +02:00
justcool393 427d8f643d ratelimiting: use ratelimit_user everywhere 2022-11-21 09:30:27 -06:00
Aevann1 5288d7a7dc remove android app and replace with instructions on how to install PWA 2022-11-20 00:04:08 +02:00
justcool393 255d5b2453 security: fix mute bypass
modmail: constantify user ID
2022-11-17 16:50:06 -06:00
justcool393 caf3a81748 remove unnecessary fstrings
(or actually use the feature)
2022-11-17 10:01:03 -06:00
justcool393 4b9c702877 fix listing bugs 2022-11-15 03:28:39 -06:00
justcool393 8f2f48d6d1
[DO NOT MERGE] import detanglation (#442)
* move Base definition to files.classes.__init__.py

* fix ImportError

* move userpage listing to users.py

* don't import the app from classes

* consts: set default values to avoid crashes
consts: warn if the secret key is the default config value

* card view: sneed (user db schema)

* cloudflare: use DEFAULT_CONFIG_VALUE

* const: set default values

* decouple media.py from __main__

* pass database to avoid imports

* import cleanup and import request not in const, but in the requests mega import

* move asset_submissions site check to __init__

* asset submissions feature flag

* flag

* g.is_tor

* don't import request where it's not needed

* i think this is fine

* mail: move to own routes and helper

* wrappers

* required wrappers move

* unfuck wrappers a bit

* move snappy quotes and marseys to stateful consts

* marsify

* :pepodrool:

* fix missing import

* import cache

* ...and settings.py

* and static.py

* static needs cache

* route

* lmao all of the jinja shit was in feeds.py amazing

* classes should only import what they need from flask

* import Response

* hdjbjdhbhjf

* ...

* dfdfdfdf

* make get a non-required import

* isort imports (mostly)

* but actually

* configs

* reload config on import

* fgfgfgfg

* config

* config

* initialize snappy and test

* cookie of doom debug

* edfjnkf

* xikscdfd

* debug config

* set session cookie domain, i think this fixes the can't login bug

* sdfbgnhvfdsghbnjfbdvvfghnn

* hrsfxgf

* dump the entire config on a request

* kyskyskyskyskyskyskyskyskys

* duifhdskfjdfd

* dfdfdfdfdfdfdfdfdfdfdfdf

* dfdfdfdf

* imoprt all of the consts beacuse fuck it

* 😭

* dfdfdfdfdfdfsdasdf

* print the entire session

* rffdfdfjkfksj

* fgbhffh

* not the secret keys

* minor bug fixes

* be helpful in the warning

* gfgfgfg

* move warning lower

* isort main imports (i hope this doesn't fuck something up)

* test

* session cookie domain redux

* dfdfdfd

* try only importing Flask

* formkeys fix

* y

* :pepodrool:

* route helper

* remove before flight

* dfdfdfdfdf

* isort classes

* isort helpers

* move check_for_alts to routehelpers and also sort imports and get rid of unused ones

* that previous commit but actkally

* readd the cache in a dozen places they were implicitly imported

* use g.is_tor instead of request.headers. bla bla bla

* upgrade streamers to their own route file

* get rid of unused imports in __main__

* fgfgf

* don't pull in the entire ORM where we don't need it

* features

* explicit imports for the get helper

* explicit imports for the get helper redux

* testing allroutes

* remove unused import

* decouple flask from classes

* syntax fix also remember these have side fx for some reason (why?)

* move side effects out of the class

* posts

* testing on devrama

* settings

* reloading

* settingssdsdsds

* streamer features

* site settings

* testing settings on devrama

* import

* fix modlog

* remove debug stuff

* revert commit 67275b21ab6e2f2520819e84d10bfc1c746a15b6

* archiveorg to _archiveorg

* skhudkfkjfd

* fix cron for PCM

* fix bugs that snekky wants me to

* Fix call to realbody passing db, standardize kwarg

* test

* import check_for_alts from the right place

* cloudflare

* testing on devrama

* fix cron i think

* shadow properly

* tasks

* Remove print which will surely be annoying in prod.

* v and create new session

* use files.classes

* make errors import little and fix rare 500 in /allow_nsfw

* Revert "use files.classes"

This reverts commit 98c10b876cf86ce058b7fb955cf1ec0bfb9996c6.

* pass v to media functions rather than using g

* fix

* dfdfdfdfd

* cleanup, py type checking is dumb so don't use it where it causes issues

* Fix some merge bugs, add DEFAULT_RATELIMIT to main.

* Fix imports on sqlalchemy expressions.

* `from random import random` is an error.

* Fix replies db param.

* errors: fix missing import

* fix rare 500: only send to GIFT_NOTIF_ID if it exists, and send them the right text

* Fix signup formkey.

* fix 2 500s

* propagate db to submissions

* fix replies

* dfdfdfdf

* Fix verifiedcolor.

* is_manual

* can't use getters outside of an app context

* don't attempt to do gumroad on sites where it's not enabled

* don't attempt to do gumraod on sites's where it's unnecessary

* Revert "don't attempt to do gumroad on sites where it's not enabled"

This reverts commit 6f8a6331878655492dfaf1907b27f8be513c14d3.

* fix 500

* validate media type

Co-authored-by: TLSM <duolsm@outlook.com>
2022-11-15 03:19:08 -06:00
justcool393 c9ecb5d535
account linking improvements (#448)
currently account delinking is very messy and can sometimes just not work
we do codey stuff so it's not as bad
also we create a pretty page for mops to mop up borked account links

* alts: allow proper delinking

* fix prev commit

* url fix

* fix 500

* fixes

* :pepodrool:

* flag

* :pepodrool: redux

* sdsdsdsds

* correct endpoint

* fix html page

* alts: only adjust session history if flag is set

* fix 500

* allow relinking

* fsdsds

* :pepodrool: redux

* alts: don't fail if an alt isn't history

* use postToastSwitch + some API changes

* remove unnecessary variables

* d-none

* delink accounts mod action

* fa-link-slash

* alts: add form to create alt

* remove copied and pasted template

* rounded section

* UI improvement + fix

* \n

* fix status

* admin: remove duplicate route
admin: do a permissions check on 2 pages that need it
admin: set the manual flag for manually flagged alts

* variable change

* fix 500

* alts

* add shadowban icon to alt link tool

* shadowbanned tooltip

* add user info section

* fix 500, remove unnecessary form, and add alt votes button

* trans and also link to page

* margin

* sdsdsd

* stop the count

* fix prev commit

* with ctx

* plural

* alts

* don't show shadowbanned users to those who can't see them
this is... extremely rare and won't ever be seen in production however if perms were ever rearranged in the future, this keeps permissions correct

* shadowban check in alt list

* let shadow realm enthusiasts see shadowban alts

* sdsdsds

* test

* be graceful where needed

* sdsdsdsds

* alts: don't allow adding the same account
alts: clarify wording

* rename and reorder on admin panel

* EOL

* remove frankly unnecessary check

* try with a set

* test

* Revert "try with a set"

This reverts commit 72be353fba5ffa39b37590cc5d3bf584c94ee06e.

* Revert "Revert "try with a set""

This reverts commit 81e41890a192e8b46d0463477998e905fddf56ba.

* Revert "Revert "Revert "try with a set"""

This reverts commit be51592135a3c09848f993f0154bd2ac862ae505.

* clean up test
2022-11-14 12:32:13 -05:00
Aevann1 41ab1f313c move feature_required wrappers up 2022-11-14 18:14:47 +02:00
justcool393 84d9ed6655 antispam: sanity check 2022-11-13 21:48:52 -06:00
Snakes b5b8b2927c
Expand blackjack handling pipeline. 2022-11-13 21:43:26 -05:00
justcool393 f6842a13e4 links 2022-11-12 20:58:28 -06:00
justcool393 538497eb55 antispam: hook up duplicate checker 2022-11-12 20:48:33 -06:00
Snakes 5ce62245b1
Adjust modmail anti-spam. 2022-11-12 21:37:33 -05:00
Aevann1 05b7e79b76 remove the code i added for rdrama.com 2022-11-11 15:52:18 +02:00
justcool393 26549a6e66
remove logged out routes (#433)
* remove /logged_out/ routes

* update sitemap, remove users route, and update header

* cloudflare cookie

* only mess with the cookie whenever we desire auth

* sitemap: (small) improvements
sitemap: fix little bug i introduced
sitemap: fix login redirects for /id/ routes

* sitemap: remove duplicate entry

* contact is auth desired

* imports: don't import what we don't need and bind late to the db

* praying to god this works

* keep yourself safe

* oh i actually need to commit and push lol

* import Sub

* t

* refix cache purger
2022-11-09 00:35:24 -05:00
justcool393 0fffa7efc0 rename truecoins to truescore 2022-11-06 23:04:34 -08:00
justcool393 511ed26574 settings: add new settings pages to API
settings: remove old settings pages from API
settings: delete unused settings template
2022-11-06 20:06:37 -08:00
justcool393 6e0fd23ba3 settings: rework settings frontend 2022-11-06 20:06:37 -08:00
Aevann1 d76fe63c7f constantify image extensions and fix imgur .gif bug 2022-11-05 23:01:23 +02:00
justcool393 7c385c222f fix previous commit 2022-11-04 18:51:42 -05:00
Aevann1 07a12380de accomodate alt domain 2022-11-03 17:29:14 +02:00
Aevann1 f73c6d46df accomodate rdrama.com users 2022-11-02 08:31:04 +02:00
justcool393 89d5428f77 bans: don't leak shadowbans to people who can't see them 2022-11-01 15:59:18 -05:00
Aevann1 aec5f96a7b changes to donation flow 2022-10-30 20:43:06 +02:00
Aevann1 23883c530b constantify TRUESCORE_DONATE_LIMIT 2022-10-30 16:18:42 +02:00
Aevann1 cb8706ec6b small fix to /live 2022-10-30 01:33:23 +02:00