Skip to content

Piero Bosio Social Web Site Personale Logo Fediverso

Social Forum federato con il resto del mondo. Non contano le istanze, contano le persone

Hokay, I've launched a webapp at https://discoverfedi

Fediverso
10 3 35

Gli ultimi otto messaggi ricevuti dalla Federazione
Post suggeriti
  • 1 Votes
    1 Posts
    4 Views
    🚨 Security Advisory: CVE-2025-68475 A ReDoS (Regular Expression Denial of Service) vulnerability has been discovered in Fedify's HTML parsing code. This vulnerability could allow a malicious federated server to cause denial of service by sending specially crafted HTML responses. CVE ID CVE-2025-68475 Severity High (CVSS 7.5) Affected versions ≀1.9.1 Patched versions 1.6.13, 1.7.14, 1.8.15, 1.9.2 If you're running Fedify in production, please upgrade to one of the patched versions immediately. For full details, see the security advisory: https://github.com/fedify-dev/fedify/security/advisories/GHSA-rchf-xwx2-hm93 Thank you to Yue (Knox) Liu for responsibly reporting this vulnerability. #Fedify #ActivityPub #security #fediverse #fedidev
  • #Fediverse - help needed!

    Fediverso fediverse oer oercamp
    1
    0 Votes
    1 Posts
    11 Views
    #Fediverse - help needed!We're looking for people working on #OER who are active in the Fediverse.On the occasion of #OERcamp global, we want to create an overview for everyone to reuse.Star if you'd like to be included with your handleBoost if you want to help us reach as many people as possibleThank you! ❀️
  • 0 Votes
    1 Posts
    10 Views
    There are two big features in release v3.1.3 of Ktistec: auto-approve followers and a new image viewer.Auto-approve followers is conceptually simple ("the server automatically sends an Accept activity when it receives a Follow activity") but it required extensive changes to some of the oldest code in the codebase: the inboxes and outboxes controllers. I refactored inbox and outbox side-effect processing into independent services, which made it possible to support side-effects like auto-approve follow (and also auto-follow back), without having to go through the controllers.A more significant change for me personally was replacing the lightGallery image gallery (an external dependency) with my own implementation. It's not as slick, and not as full of featuresβ€”I wrote it in two daysβ€”but it is fully free software, and that's important to me.AddedAdd admin page for managing OAuth access tokens.Add support for auto-approve followers. (fixes #26)Add support for auto-follow back.FixedPrevent triggering actor refresh when user is anonymous.ChangedReplace "lightgallery" dependency with custom image viewer.Set OAuth access token expiry to 30 days (previously expired after 24 hours).Refactor inbox and outbox processing into dedicated processor services.The OAuth changes set the groundwork for better support of the Mastodon API and the Fediverse clients that depend on it. Stay tuned!#ktistec #fediverse #activitypub #crystallang
  • 0 Votes
    12 Posts
    29 Views
    Now this is a good reason to move a community to a different region.