Commits · cfeb2f96ce0decf659b98e08fbd3b07964f027e6 · TeDomum / matrix-media-repo

Jun 23, 2019
- fixed dockerfile · cfeb2f96
  Andrew Morgan authored 5 years ago
  
  cfeb2f96
- remove vendor dir from .dockerignore · 5eb2b0c4
  Andrew Morgan authored 5 years ago
  
  5eb2b0c4
- remove vendor folder from .gitignore · 614a82ed
  Andrew Morgan authored 5 years ago
  
  614a82ed
Jun 21, 2019
- Merge branch 'master' into anoa/go_mods · 37dba8d5
  Andrew Morgan authored 5 years ago
  
  37dba8d5
- Support connection pooling on the database · 71c3af9e
  Travis Ralston authored 5 years ago
  
  71c3af9e
- Cache expected server hostname too · 9c19150a
  Travis Ralston authored 5 years ago
  
  Fixes https://github.com/turt2live/matrix-media-repo/issues/171
  9c19150a
Jun 20, 2019
- go1.12 · 2737351b
  Andrew Morgan authored 5 years ago
  
  2737351b
- Make sure gomodule is enabled for CI that puts the repo in gopath · 1f703689
  Andrew Morgan authored 5 years ago
  
  1f703689
- Add GO111MODULE=on to build.sh · 98faefe1
  Andrew Morgan authored 5 years ago
  
  98faefe1
- Fix windows build attempt, remove sytest job · 47afa4fd
  Andrew Morgan authored 5 years ago
  
  47afa4fd
- Fix CI · b1862f89
  Andrew Morgan authored 5 years ago
  
  b1862f89
- Change to go modules · aa7e2c1a
  Andrew Morgan authored 5 years ago
  
  aa7e2c1a
Jun 18, 2019
- Fix certificate validation again · 2ff1a989
  Travis Ralston authored 5 years ago
  
  Fixes https://github.com/turt2live/matrix-media-repo/issues/168
  2ff1a989
Jun 14, 2019
- Add health check endpoint · 1cc2c8d1
  Travis Ralston authored 5 years ago
  
  Fixes https://github.com/turt2live/matrix-media-repo/issues/167
  1cc2c8d1
- Fix hostname resolution for HTTP requests · baac0192
  Travis Ralston authored 5 years ago
  
  Fixes https://github.com/turt2live/matrix-media-repo/issues/166
  baac0192
- Add a federation test endpoint for admins · 15b83450
  Travis Ralston authored 5 years ago
  
  15b83450
Jun 11, 2019
- Merge pull request #165 from turt2live/travis/validate-certificates · aebbf89e
  Travis Ralston authored 5 years ago
  
  Validate certificates as per Matrix 1.0
  Unverified
  
  aebbf89e
Jun 02, 2019

Validate certificates as per Matrix 1.0 · 626a46c4

Travis Ralston authored 5 years ago

Fixes https://github.com/turt2live/matrix-media-repo/issues/137

See https://matrix.org/blog/2019/05/24/final-countdown-to-1-0

626a46c4

May 15, 2019
- Merge pull request #161 from ananace/fix-svg-thumbnailing · 95eaef6e
  Travis Ralston authored 5 years ago
  
  Fix tempfile handling for SVG thumbnailing
  Unverified
  
  95eaef6e
- Fix tempfile handling for SVG thumbnailing · 3277bbe1
  Alexander Olofsson authored 5 years ago
  
  Unverified
  
  3277bbe1
May 04, 2019

Security: Ensure calculated URL previews are validated · 37d91797
Travis Ralston authored 5 years ago
```
See ce7259f1
```
37d91797

Security: Ensure OpenGraph URL previews make requests to a validated IP · ce7259f1

Travis Ralston authored 5 years ago

See https://github.com/matrix-org/synapse/issues/4242 for some information - we were previously vulnerable to the short TTL problem. If someone were to take sufficient control of DNS, they could trick us into doing requests to a blacklisted host.

This also fixes a vulnerability where OpenGraph images were not passed through the same validation rules.

ce7259f1

Move preview access control to a dedicated package · 7d679f9d
Travis Ralston authored 5 years ago

7d679f9d
Security: Block unroutable addresses · e4547338
Travis Ralston authored 5 years ago
```
See https://github.com/matrix-org/synapse/pull/5134
```
e4547338

May 03, 2019
- Merge branch 'proposalDockerfile' · 78d3ee4d
  Travis Ralston authored 5 years ago
  
  78d3ee4d
- Use Go 1.10 for the repo intentionally · 4bcab3c9
  Travis Ralston authored 5 years ago
  
  4bcab3c9
- Reduce build context size by copying gitignore · 3b434f9f
  Travis Ralston authored 5 years ago
  
  3b434f9f
- Disable sytest for now · 8a2681b9
  Travis Ralston authored 5 years ago
  
  It doesn't work
  8a2681b9
Apr 25, 2019
- Changes Dockerfile to make better use of caching · 5d549b76
  Luca Corbatto authored 5 years ago
  
  5d549b76
Apr 22, 2019
- Merge pull request #151 from targodan/fixCertificateError · dc18e9d6
  Travis Ralston authored 5 years ago
  
  Fixes #150
  Unverified
  
  dc18e9d6
- Fixes #150 · 9bf3e1eb
  Luca Corbatto authored 5 years ago
  
  9bf3e1eb
Apr 18, 2019
- Merge branch 'travis/storagePaths' · 8359f1c6
  Travis Ralston authored 5 years ago
  
  8359f1c6
Apr 16, 2019
- Support storagePaths configuration option at a higher level · 0919f2f9
  Travis Ralston authored 5 years ago
  
  0919f2f9
Apr 15, 2019
- Add some debugging around federation handling · e3972068
  Travis Ralston authored 5 years ago
  
  e3972068
- Add docs for new datastore endpoints · 088b9cc9
  Travis Ralston authored 5 years ago
  
  088b9cc9
Apr 14, 2019
- Add an API to transfer media between datastores · aa71e7f4
  Travis Ralston authored 5 years ago
  
  aa71e7f4
- Query thumbnails too, not just media twice · f7fa22ad
  Travis Ralston authored 5 years ago
  
  f7fa22ad
- Add an API to get datastores · 3cb76aea
  Travis Ralston authored 5 years ago
  
  3cb76aea
- Add a datastore estimation API · d63e0f59
  Travis Ralston authored 5 years ago
  
  d63e0f59
- Support webp and heif (heic) thumbnails · c16ce2c3
  Travis Ralston authored 5 years ago
  
  Fixes https://github.com/turt2live/matrix-media-repo/issues/134
  c16ce2c3