Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fix being able to appeal a strike unlimited times #18529

Merged
merged 1 commit into from May 26, 2022

Conversation

Gargron
Copy link
Member

@Gargron Gargron commented May 26, 2022

MASTODON-BP0672LE

Peculiarity of the `has_one` association is that the convenience
creation method deletes the previous association even if the new
one is invalid
@Gargron Gargron added the security Security issues and fixes, vulnerabilities label May 26, 2022
@Gargron Gargron merged commit 8a9acbe into main May 26, 2022
@Gargron Gargron deleted the security-fix-unlimited-appeals branch May 26, 2022 20:08
kadoshita pushed a commit to kadoshita/mastodon that referenced this pull request May 27, 2022
Peculiarity of the `has_one` association is that the convenience
creation method deletes the previous association even if the new
one is invalid
koba-lab added a commit to koba-lab/mastodon that referenced this pull request Sep 2, 2022
* commit 'fbcbf7898f000d9d1a21d52e8a8d3ed4602aa7db': (168 commits)
  Bump version to 3.5.3 (mastodon#18530)
  Fix errors when rendering RSS feeds (mastodon#18531)
  Fix concurrent unfollowing decrementing follower count more than once (mastodon#18527)
  Fix being able to appeal a strike unlimited times (mastodon#18529)
  Fix being able to report otherwise inaccessible statuses (mastodon#18528)
  Fix empty votes arbitrarily increasing voters count in polls (mastodon#18526)
  Fix moderator leak in undo_mark_statuses_as_sensitive (mastodon#18525)
  Fix suspended users being able to access APIs that don't require a user (mastodon#18524)
  Fix confirmation redirect to app without `Location` header (mastodon#18523)
  Fix follower and other counters being able to go negative (mastodon#18517)
  Add ES6 compatibility to browserslist (mastodon#18519)
  Remove 3.3.x from supported versions in security policy (mastodon#18516)
  Fix regression in `tootctl search deploy` caused by unloaded attribute (mastodon#18514)
  Change "dangerous" to "sensitive" in privacy policy and web UI (mastodon#18515)
  Change unapproved and unconfirmed account to not be accessible in the REST API (mastodon#17530)
  Bump @babel/preset-env from 7.17.12 to 7.18.2 (mastodon#18512)
  Bump @babel/plugin-transform-runtime from 7.17.12 to 7.18.2 (mastodon#18511)
  Bump immutable from 4.0.0 to 4.1.0 (mastodon#18502)
  Bump @babel/plugin-transform-runtime from 7.17.12 to 7.18.0 (mastodon#18489)
  Bump @babel/runtime from 7.17.9 to 7.18.0 (mastodon#18494)
  ...

# Conflicts:
#	app/javascript/mastodon/locales/ja.json
ClearlyClaire pushed a commit to ClearlyClaire/mastodon that referenced this pull request Jul 6, 2023
Peculiarity of the `has_one` association is that the convenience
creation method deletes the previous association even if the new
one is invalid
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
security Security issues and fixes, vulnerabilities
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants