Commit Graph

17735 Commits (d236bea60e6b54cde7a164763042446f34e66b41)

Author SHA1 Message Date
Aevann1 a099450dc1 rename marseynooo 2022-12-08 16:59:35 +02:00
Aevann1 5e8f2d0681 clearer error message 2022-12-08 16:34:31 +02:00
SneedBot 2295463d24 sneed 2022-12-08 13:55:51 +00:00
Aevann1 9b5496b140 fix updating marseys that dont follow the naming convention 2022-12-08 15:55:30 +02:00
Aevann1 b89f9103d3 the advent of fixing codeblocks 2022-12-08 15:02:51 +02:00
Aevann1 082d56788d move random user button on mobile and replace it with chat button under certain circumstances 2022-12-08 14:15:21 +02:00
Aevann1 1cfa395b97 added padding 2022-12-08 08:13:48 +02:00
Aevann1 5d11c820f7 remove an estoric profanity filter 2022-12-08 07:22:46 +02:00
Aevann1 0d812f1294 check for profile background existence before atttempting to delete 2022-12-08 07:20:34 +02:00
Aevann1 0a915aae08 disable ghost threads in WPD 2022-12-08 07:14:59 +02:00
Snakes 05691b980d
PCM: Christmas lottery hyperinflation (by request). 2022-12-07 19:50:44 -05:00
Aevann1 b7836e696a fix marseywheredrama2.webp 2022-12-07 22:57:08 +02:00
Aevann1 9f8d2fc8a0 increase max size for site assets from 500kb to 1MB 2022-12-07 22:53:52 +02:00
Aevann1 ecda2536ec use insertAdjacentHTML 2022-12-07 22:27:25 +02:00
Aevann1 3c2880fd11 fix edge case 2022-12-07 21:59:02 +02:00
Aevann1 cff9249572 watermark 2022-12-07 21:05:52 +02:00
Aevann1 f95f4f2c97 simplify badge granting/removal 2022-12-07 21:03:06 +02:00
Aevann1 b8eb4384d6 fix midnight theme 2022-12-07 20:56:09 +02:00
Aevann1 bd3f0fcc84 fix 500 error 2022-12-07 19:57:56 +02:00
SneedBot 1b1d997415 sneed 2022-12-07 17:54:10 +00:00
Aevann1 93063516ce tie transparent theme to backgrounds 2022-12-07 19:53:29 +02:00
Aevann1 75bd617c47 all wpd jannies to grant/remove y'all seeing eye badge 2022-12-07 19:15:53 +02:00
Aevann1 124a86643d fix markdown preview for polls 2022-12-07 19:12:56 +02:00
mummified-corroding-granny 7a5750a408 Uniformization of verbiage. Purge every dot (#54)
As one would expect, pointless to have a dot at the end of the subject of a very important message (dot)
Were it not for the extraneous dot, the legitimacy of the message would still be in question due to its lack of verbiage uniformization. The verbiage is "verify" everywhere else except for some parts of the code itself. This is egregious. With this single-commit pull request, we erradicate the last of "Validate".

Co-authored-by: mmadeira <marcos_madeira@outlook.com>
Reviewed-on: #54
Co-authored-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
Co-committed-by: mummified-corroding-granny <mummified-corroding-granny@noreply.fsdfsd.net>
2022-12-07 16:54:18 +00:00
Aevann 81267ef1c6 do this https://stupidpol.site/h/countryclub/post/79285/tired-of-some-cute-twink-jannies/3194721?context=8#context (#53)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: #53
2022-12-07 16:51:51 +00:00
Aevann1 e8f9d39bcf discussion -> wall 2022-12-07 11:04:22 +02:00
Aevann1 fee6e7150b same as last commit 2022-12-07 11:03:02 +02:00
Aevann1 e4b102873d in jinja, convert some + instances to ~ 2022-12-07 10:59:40 +02:00
Aevann1 d01b5dfd9f add "view entire discussion" to profile walls 2022-12-07 10:55:47 +02:00
Aevann1 4634b45212 fix profile wall push notif titles 2022-12-07 10:48:06 +02:00
Aevann1 1a4600bd95 imagemagick is really cringe 2022-12-07 10:42:23 +02:00
Aevann1 5d2dbee95e increase MAX_IMAGE_CONVERSION_TIMEOUT from 15 to 30 2022-12-07 10:30:11 +02:00
Aevann1 ab51e97e09 better error message 2022-12-07 10:28:01 +02:00
Aevann1 d781c853f8 force transparent theme on userprofiles with a profile background 2022-12-07 10:23:03 +02:00
Aevann1 a3f1b85e16 fix this https://stupidpol.site/h/programming/post/129189/advent-of-code-day-6/3195992?context=8#context 2022-12-07 09:58:46 +02:00
SneedBot 8e964d5b68 sneed 2022-12-07 07:54:23 +00:00
Aevann1 7d6b5862e4 uncomment commented line lol 2022-12-07 09:53:46 +02:00
Aevann1 3f6d2be5f6 fix chat in midnight theme 2022-12-07 09:52:54 +02:00
Aevann1 14aaed820c boost scrd.app 2022-12-07 09:36:56 +02:00
Aevann1 55125cf217 remove padding 2022-12-07 08:21:13 +02:00
Aevann1 5e87e53335 make poll limit 20 on rdrama and 30 on wpd 2022-12-07 07:30:03 +02:00
SneedBot 17696b5ca2 sneed 2022-12-06 22:09:50 +00:00
justcool393 6dbad04f08 band-aid fix for frozen session issue on signup (#50)
through some reason or another, people are somehow getting cookies that aren't prepended with a dot.

this is a problem because both sessions at, as best as I can tell, mix so it tries to read from a different cookie than we write to. this essentially "freezes" the session in place. users are unable to login, logout, signup, toggle poor mode, toggle NSFW, etc.

~~this attempts to delete bad session cookies (i.e. cookies with a domain that don't start with a dot).~~

~~we don't do this on "dotless" domains (and by extension localhost) because browser support for setting cookies on FQDNs that only have one dot has tenuous support among browsers anyway).~~

~~this *may* log some people out, but... their days of being able to do stuff on the site were numbered anyway.~~

**edit: as amazing as this thought was, browsers just wipe the entire cookies completely and there's no way to specifically target dotless cookies. for an issue that affects a few users, better to just tell them to clear their cookies. if *this* doesn't work, delete service-worker.js and be done with the whole service worker crap. forever. permanently. this PR also includes some QOL improvements.**

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #50
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-06 22:07:12 +00:00
justcool393 c12bf5105f WPD: remove poll limit (#51)
by request of the wpd mops

Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #51
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-06 18:24:41 +00:00
Snakes 9160a853ec
Remove !YOU!.
Security mess and stale joke.
2022-12-05 20:06:04 -05:00
Snakes fe5ffd1bcf
security: sanitize !YOU! in <a href="">.
Unlike the recent auto-embed exploits which have been patched, this
requires active user action. However our userbase, like all userbases,
contains quite a few retards and phoneposters who don't check links
before clicking.

Example exploit:

    <a href="https://example.com/log?username=!YOU!">Bardfinn Dox</a>
2022-12-05 19:05:02 -05:00
Snakes 616634158c
Narrow approved_embed_hosts for security.
Probably will break some peoples' profilecss and irritate the
newsposters, but in light of recent live proven exploits to disclose
user IP & username pairs to remote servers, the broad list of embed
hosts was unsustainable and impossible to prove safe.

We extend is_safe_url to allow whitelisting subdomains, specifically
to solve the s.lain.la open redirect exploit. Also, open media proxies
like external-content.duckduckgo.com were concerning enough, despite
likely being safe, to warrant removal. Anything infrequently used and
difficult to review, or has a reasonable alternative, was also removed.

In general: we want people to be rehosting, and if we want to allow
more external content, we need to run a media proxy. The central issue
is that any user-configurable 302 is a potential disclosure risk, and
Lord knows how many ways there were to get <arbitrarynewssite>.com to
do so. Maybe zero, but the problem is we just don't know.
2022-12-05 18:57:35 -05:00
float-trip bca9aff068 Disallow !YOU! in URLs. (#49)
!YOU! + an escape for `approved_embed_hosts` could let you grab the IP and username of everyone who views your comment

https://rdrama.net/post/129053/you-callout-thread/3191218?context=8#context

lain.la has a URL shortener that also works to get around embed hosts, fwiw

Co-authored-by: float trip <float-trip@rdrama.net>
Reviewed-on: #49
Co-authored-by: float-trip <float-trip@noreply.fsdfsd.net>
Co-committed-by: float-trip <float-trip@noreply.fsdfsd.net>
2022-12-05 21:20:59 +00:00
Aevann1 b5b3b9dcc3 fix pin awards 2022-12-05 18:01:13 +02:00
Aevann1 ede58dd886 fix margins 2022-12-05 17:23:41 +02:00
Aevann1 8101e7d91b fix 500 errors 2022-12-05 17:16:11 +02:00
Aevann1 15088e5eef add button to remove current profile background 2022-12-05 17:14:53 +02:00
Aevann1 84ec5f5b46 truncate unnecessary logic 2022-12-05 17:10:15 +02:00
Aevann1 847385ad87 fix https://stupidpol.site/h/changelog/post/128866/changelog-added-profile-walls-profile-views/3188365?context=8#context 2022-12-05 16:51:50 +02:00
SneedBot 4ddbd0117f sneed 2022-12-05 14:38:36 +00:00
Aevann1 2b7f7cef1b fix marking read from push notifs 2022-12-05 16:38:24 +02:00
Aevann1 99c12a74ad only show "upload profile background" if user on desktop or uses transparent theme to prevent confusion 2022-12-05 16:30:55 +02:00
Aevann1 ab7144d94a Revert "only show "upload profile background" if user on desktop or uses transparent theme"
This reverts commit 7b0de3e79d.
2022-12-05 16:25:39 +02:00
SneedBot 8d9c7fe635 sneed 2022-12-05 14:22:33 +00:00
Aevann1 7b0de3e79d only show "upload profile background" if user on desktop or uses transparent theme 2022-12-05 16:22:19 +02:00
Aevann1 7f1de57ffe minor log fix 2022-12-05 16:06:11 +02:00
Aevann1 159cb52e46 add looksmax.org to BOOSTED_SITES 2022-12-05 15:59:01 +02:00
Aevann1 4583c3d4eb cosmetic changes 2022-12-05 08:46:04 +02:00
Aevann1 67136ec707 minor style change 2022-12-05 08:23:42 +02:00
Aevann1 c0169d0dab fix voting on profile wall 2022-12-05 08:18:37 +02:00
Aevann1 1fead79a86 fix 2022-12-05 08:15:13 +02:00
Aevann1 9dacb7c307 add teamblind.com to boosted sites 2022-12-05 08:13:11 +02:00
Aevann1 f5ef9f431a fix wall margins 2022-12-05 08:12:46 +02:00
Aevann1 77058d31dc move pcm sidebar image to top 2022-12-05 07:35:05 +02:00
Aevann1 39ad0bd5f8 fix margins 2022-12-05 07:33:32 +02:00
Aevann1 4e4a0e734a margin change 2022-12-05 07:29:44 +02:00
Aevann1 bbc33b9331 edit PCM rules 2022-12-05 07:28:15 +02:00
Aevann 18df70caab allow JL3 to edit rules (#39)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: #39
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-05 05:22:08 +00:00
Aevann1 77c37b0fd2 same as last commit 2022-12-05 07:01:20 +02:00
Aevann1 e7fbf5f5b9 site background shit 2022-12-05 07:00:44 +02:00
Aevann1 ea934e17b9 fix 500 error 2022-12-05 06:57:27 +02:00
Aevann1 57ffc26fc6 grammar + consistency 2022-12-05 06:56:05 +02:00
Aevann1 868fb1024f update carp's badge 2022-12-05 06:37:03 +02:00
Aevann f8aa67fb9a add button on profile to upload profile background (#48)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: #48
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-05 04:16:45 +00:00
SneedBot ef4243f5c0 sneed 2022-12-05 04:12:09 +00:00
Aevann1 87573936e7 disable site background in profiles 2022-12-05 06:05:20 +02:00
Aevann1 aeeeabbfd7 fix margins 2022-12-05 05:43:24 +02:00
Aevann1 3971607aee fix agendapostered wall comments 2022-12-05 05:08:06 +02:00
Aevann1 13a208ee88 remove stray tabs and spaces 2022-12-05 05:03:10 +02:00
Aevann1 af3b028ca5 add links to individuals comments in walls + fix awards for wall comments 2022-12-05 05:01:50 +02:00
Aevann1 6cfe0fceb4 hide another broken button 2022-12-05 04:33:42 +02:00
Aevann1 29d1d08eb8 hide 2 broken buttons 2022-12-05 04:27:30 +02:00
Aevann1 e9f4f88f24 fix notifs for profile wall replies 2022-12-05 04:19:51 +02:00
Aevann1 d6a219c151 fix this https://rdrama.net/h/changelog/post/128866/changelog-added-profile-walls-profile-views/3186595?context=8#context 2022-12-05 04:11:13 +02:00
Aevann1 1e34625c1f fix editing wall comments 2022-12-05 04:08:24 +02:00
Aevann1 111832a7d2 fix 500 error 2022-12-05 04:04:14 +02:00
Aevann1 5473cb3084 add snus mentions 2022-12-05 04:01:55 +02:00
Aevann1 f2c4dc429a fix for MIMW_ID 2022-12-05 04:01:01 +02:00
Aevann1 bfb8eba832 dont do relationship query when not necessary 2022-12-05 03:59:31 +02:00
Aevann1 66aeb82823 add pings for MIMW 2022-12-05 03:57:24 +02:00
Aevann1 dbc64dc487 fix profile wall for logged-outcels 2022-12-05 03:53:09 +02:00
Aevann1 468fd5f5f4 add (((heymoon))) notifs 2022-12-05 03:40:51 +02:00
Aevann1 492c377e8e show "profile wall" above wall notifs 2022-12-05 03:37:44 +02:00
Aevann1 8d64804724 fix wrong username direct 2022-12-05 03:33:43 +02:00
Aevann1 5070cb4fc0 fix spam check 2022-12-05 03:31:21 +02:00
Snakes 2057c48ebd
Fix userpage walls for logged-out viewers. 2022-12-04 20:23:48 -05:00
Aevann1 14d343dcb3 dont change titles for chudded ppl posting on /h/chudrama 2022-12-05 03:21:47 +02:00
Snakes d976dcef7e
Update wall_comment for sanitize_poll_options. 2022-12-04 20:05:45 -05:00
Aevann1 cb4d941fd0
add profile wall 2022-12-04 20:05:45 -05:00
Aevann1 814552cdfe small fix for ppl with progstack=1 2022-12-05 02:45:02 +02:00
Aevann 5850bb26fa add custom backgrounds paypig feature to compensate for profile views (#44)
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Reviewed-on: #44
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-05 00:02:29 +00:00
Aevann1 bae24fe92e add reload button to ioscels 2022-12-05 01:22:22 +02:00
Snakes be2b210df4
Remove superfluous #disablepoll command.
Already resolved by 29070c78a9.
2022-12-04 17:15:52 -05:00
justcool393 ed0981cbdb add functionality to disable poll formatting (#35)
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #35
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-04 21:46:27 +00:00
Aevann1 892e35b1c3 splash mountain for PCM 2022-12-04 23:28:39 +02:00
Snakes 61dc9c47fd
Restore showing linkpost URLs in submission body. 2022-12-04 15:50:09 -05:00
justcool393 6e1509f2df admins: let mops who can mop posts see posts regardless of browser (#45)
Co-authored-by: justcool393 <justcool393@gmail.com>
Reviewed-on: #45
Co-authored-by: justcool393 <justcool393@noreply.fsdfsd.net>
Co-committed-by: justcool393 <justcool393@noreply.fsdfsd.net>
2022-12-04 20:26:39 +00:00
Aevann1 c56ceaf668 allow me and sneks to see apple posts 2022-12-04 22:11:16 +02:00
Aevann1 e66234eb6a fix offsitementions 2022-12-04 21:48:28 +02:00
Aevann1 da643ea88b sneed 2022-12-04 21:30:33 +02:00
Aevann1 e0fd83c010 fix app.html if condition 2022-12-04 21:22:53 +02:00
Aevann 3eecec0a51 downloadable videos on apple devices (#42)
![image](/attachments/bd1b3e1e-c0a9-4eee-9b1c-a03e1e8a8cbd)

Co-authored-by: Aevann1 <randomname42029@gmail.com>
Co-authored-by: Snakes <duolsm@outlook.com>
Co-authored-by: Snakes <snakes@noreply.fsdfsd.net>
Reviewed-on: #42
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-04 19:02:22 +00:00
Aevann e105035272 remove country club system and replace it with a 3 tier thing: (#41)
- /h/masterbaiters: 1 TS - for gayops

- /h/countryclub: 1000 TS - for anything requiring secrecy and doesnt need critical mass - have to make it a rule that u cant post gayops in /h/countryclub

- /h/chudrama: 5000 TS - for chad+stud posts

EDIT: i removed the /h/masterbaiters gate, but u can bring it back if u want
Co-authored-by: Aevann1 <randomname42029@gmail.com>
Co-authored-by: Snakes <duolsm@outlook.com>
Reviewed-on: #41
Co-authored-by: Aevann <aevann@noreply.fsdfsd.net>
Co-committed-by: Aevann <aevann@noreply.fsdfsd.net>
2022-12-04 18:39:06 +00:00
Aevann1 29070c78a9 fix this and related stuff https://stupidpol.site/h/programming/post/128394/advent-of-code-day-3-i/3182179?context=8#context 2022-12-04 17:53:41 +02:00
Aevann1 c0676e198c convert "var" to "let" and "const" 2022-12-04 17:40:32 +02:00
Aevann1 30405e1841 slur fix 2022-12-04 16:44:59 +02:00
Aevann1 15b5dfcb3a fix last commit 2022-12-04 03:39:39 +02:00
Aevann1 1bb80046f4 fix last commit 2022-12-04 03:39:09 +02:00
Aevann1 ed834225ae temp sidebar image 2022-12-04 03:38:04 +02:00
SneedBot 5d1599bc77 sneed 2022-12-04 01:36:15 +00:00
Aevann1 a565c36bff rename marseybye to marseywave3 2022-12-04 01:27:37 +02:00
Aevann1 36c69cca0a kofi - only change patron tier when its a supscription 2022-12-04 00:51:52 +02:00
Aevann1 1f675c61e5 minor regex fix for emojis 2022-12-04 00:26:05 +02:00
Aevann1 49263fdd86 Revert "stop using background css property and use its parts instead"
This reverts commit e4e67a4424.
2022-12-04 00:17:35 +02:00
SneedBot 5665bd9a96 sneed 2022-12-03 22:16:04 +00:00
Aevann1 e4e67a4424 stop using background css property and use its parts instead 2022-12-04 00:11:02 +02:00
Aevann1 a92737b85c re-add kylie slur filter 2022-12-04 00:01:24 +02:00
Aevann1 2deba4d623 "megathread" new sort 2022-12-04 00:01:08 +02:00
Aevann1 8d218c28e2 fix this https://stupidpol.site/h/programming/post/128511/nostalgia-post-heres-a-shitty-tictactoe/3179456?context=8#context 2022-12-03 22:09:12 +02:00
Aevann1 045cb629ae fix this https://stupidpol.site/h/programming/post/128513/its-another-shoah-soycry 2022-12-03 22:00:10 +02:00
Aevann1 0046e63bc7 boost /h/programming temporarily - revert at will 2022-12-03 21:56:27 +02:00
SneedBot 0659198745 sneed 2022-12-03 19:32:40 +00:00
Aevann1 a13311d72e sneed 2022-12-03 21:10:59 +02:00
Aevann1 5d3413377d sneed 2022-12-03 20:57:44 +02:00
Aevann1 a193952c5e fix this https://stupidpol.site/h/slackernews/post/128394/advent-of-code-day-3-i/3177263?context=8#context 2022-12-03 10:02:26 +02:00
Aevann1 407dcb1282 same as last commit 2022-12-03 07:39:58 +02:00
Aevann1 f28ae7cca1 refresh comment textarea on edit - fixes edge case 2022-12-03 07:27:47 +02:00
Aevann1 fa0bb57253 fix this https://stupidpol.site/post/18459/marseycapywalking-megathread-for-bugs-and-suggestions/3175605?context=8#context 2022-12-03 04:14:01 +02:00
Aevann1 7a14d66944 make "remove background" btn more obvious 2022-12-03 03:58:23 +02:00
Aevann1 8f065a2428 fix award modal on mobile 2022-12-03 02:14:11 +02:00
Snakes f892b3f821
PCM: add unlisted emoji `:kippy2:` 2022-12-02 19:11:28 -05:00
Aevann1 aad1d72f43 add code so i can make a post that only legacy android app users can see 2022-12-03 01:58:16 +02:00
Snakes 39558a2812
PCM: christmas banners rotation, pt2. 2022-12-02 18:49:03 -05:00
Aevann1 d8292b7601 try different approach to opening push notification 2022-12-03 01:47:35 +02:00
Snakes 64de53e9a9
Fix signup overflowing on mobile, and related. 2022-12-02 18:33:11 -05:00