GNU social JP
  • FAQ
  • Login
GNU social JPは日本のGNU socialサーバーです。
Usage/ToS/admin/test/Pleroma FE

  • Public

    • Public
    • Network
    • Groups
    • Featured
    • Popular
    • People

Embed Notice

HTML Code

Corresponding Notice

  1. Embed this notice
    Alex Gleason (alex@gleasonator.com)'s status on Friday, 04-Aug-2023 23:39:15 JSTAlex GleasonAlex Gleason
    • Oneesan succubus
    Pleroma is full of security vulnerabilities because OnlyFans paid people on Upwork to implement a bunch of features nobody wants.

    Have you ever tried downloading an emoji pack from a server? No? Well that's the vulnerable code.

    Anyway, hopefully everyone is using s3 for uploads by now and has the dedupe filter enabled.

    Patch is being merged into Rebased now: https://gitlab.com/soapbox-pub/rebased/-/merge_requests/263

    A patch was ready yesterday but I figured I'd wait til after it landed upstream first.

    RT: https://pleroma.soykaf.com/objects/c655af15-7632-41e6-86f3-d06ab5bbb84a
    In conversationabout a year ago from gleasonator.compermalink

    Attachments

    1. Domain not in remote thumbnail source whitelist: gitlab.com
      Merge Pleroma (security fix) (!263) · Merge requests · Soapbox / Rebased · GitLab
      See: https://pleroma.social/announcements/2023/08/04/pleroma-security-release-2.5.3/

  • Help
  • About
  • FAQ
  • TOS
  • Privacy
  • Source
  • Version
  • Contact

GNU social JP is a social network, courtesy of GNU social JP管理人. It runs on GNU social, version 2.0.2-dev, available under the GNU Affero General Public License.

Creative Commons Attribution 3.0 All GNU social JP content and data are available under the Creative Commons Attribution 3.0 license.