GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    mist (ai@cawfee.club)'s status on Saturday, 27-May-2023 04:13:45 JSTmistmist
    in reply to
    • john paul grips
    @grips I know nothing about this stuff, but have you seen this post by Gleason?

    > Here’s what does NOT work: - Disabling the media proxy on its own. The media proxy does appear to be vulnerable, but it cannot be the only action you take.

    https://gleasonator.com/notice/AW3PsTi4WCWEUbN0uO
    In conversationSaturday, 27-May-2023 04:13:45 JST from gnusocial.jppermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: media.gleasonator.com
      Alex Gleason :soapbox: (@alex@gleasonator.com)
      Pleroma / Akkoma / Rebased need to be patched, but here’s how you can secure your site without any code changes:yoursite.com/media -> media.yoursite.com yoursite.com/proxy -> proxy.yoursite.comTo d...
  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.