Alex Vandiver c726d2ec01 thumbnail: Do not Camo old thumbor URLs; serve images directly. ...

Providing a signed Camo URL for arbitrary URLs opened the server up to
being an open redirector.  Return 403 if the URL is not a user upload,
and the backend image if it is.  Since we do not have ImageAttachment
rows for uploads at a time we wrote `/thumbnail?` URLs, return the
full-size content.

2024-07-24 16:04:34 -07:00

..

development

thumbnail: Do not Camo old thumbor URLs; serve images directly.

2024-07-24 16:04:34 -07:00

__init__.py

…

alert_words.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

attachments.py

…

auth.py

zerver: Replace uri with url in local variables and comments.

2024-07-14 22:30:28 -07:00

compatibility.py

…

custom_profile_fields.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

digest.py

…

documentation.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

drafts.py

ruff: Fix UP006 Use list instead of List for type annotation.

2024-07-13 22:28:22 -07:00

email_mirror.py

zerver: Migrate some files to typed_endpoint.

2024-07-20 15:46:48 -07:00

errors.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

events_register.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

health.py

…

home.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

invite.py

zerver: Migrate some files to typed_endpoint.

2024-07-20 15:46:48 -07:00

message_edit.py

events: Send delete_message event to user who deleted the message.

2024-07-16 23:29:02 -07:00

message_fetch.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

message_flags.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

message_send.py

ruff: Fix FURB142 Use of set.add() in a for loop.

2024-07-14 13:52:59 -07:00

muted_users.py

…

onboarding_steps.py

onboarding: Migrate to typed_endpoint.

2024-06-14 11:24:36 -07:00

presence.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

push_notifications.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

reactions.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

read_receipts.py

requirements: Upgrade Python requirements.

2024-06-27 15:31:43 -07:00

realm_domains.py

realm: Migrate smaller files to typed_endpoint.

2024-07-15 16:49:32 -07:00

realm_emoji.py

realm: Migrate smaller files to typed_endpoint.

2024-07-15 16:49:32 -07:00

realm_export.py

realm_export: Use .count(), instead of len().

2024-04-13 21:50:42 -07:00

realm_icon.py

upload: Pass down content-type of realm icon/logo to backend.

2024-07-11 07:31:39 -07:00

realm_linkifiers.py

realm: Migrate smaller files to typed_endpoint.

2024-07-15 16:49:32 -07:00

realm_logo.py

realm: Migrate smaller files to typed_endpoint.

2024-07-15 16:49:32 -07:00

realm_playgrounds.py

realm: Migrate smaller files to typed_endpoint.

2024-07-15 16:49:32 -07:00

realm.py

settings: Add setting to control how animated images are played.

2024-07-22 14:53:31 -07:00

registration.py

zerver: Migrate some files to typed_endpoint.

2024-07-20 15:46:48 -07:00

report.py

…

scheduled_messages.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

sentry.py

ruff: Fix UP038 Use X | Y in isinstance call instead of (X, Y).

2024-07-13 22:28:22 -07:00

storage.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00

streams.py

streams: Convert to typed_enpoint.

2024-07-21 12:57:50 -07:00

submessage.py

zerver: Migrate several small files to typed_endpoint.

2024-07-05 16:18:57 -07:00

thumbnail.py

thumbnail: Do not Camo old thumbor URLs; serve images directly.

2024-07-24 16:04:34 -07:00

tutorial.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

typing.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

unsubscribe.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

upload.py

thumbnail: Move get_image_thumbnail_path and split_thumbnail_path.

2024-07-18 13:50:28 -07:00

user_groups.py

ruff: Fix UP035 Import from collections.abc, typing instead.

2024-07-13 22:28:22 -07:00

user_settings.py

settings: Add setting to control how animated images are played.

2024-07-22 14:53:31 -07:00

user_topics.py

validators: Use cleaner syntax for AfterValidator.

2024-07-15 16:49:32 -07:00

users.py

users: Change bot owner only if needed.

2024-07-17 10:07:51 -07:00

video_calls.py

ruff: Fix UP006 Use list instead of List for type annotation.

2024-07-13 22:28:22 -07:00

zephyr.py

ruff: Fix UP007 Use X | Y for type annotations.

2024-07-13 22:28:22 -07:00