From 5826acbf246d377a31a8e7cb4f6f0f32b6cd4aa0 Mon Sep 17 00:00:00 2001 From: Jesse Wierzbinski Date: Fri, 26 Jul 2024 19:33:54 +0200 Subject: [PATCH] docs: :memo: Update CHANGELOG --- CHANGELOG.md | 5 +++++ config/config.example.toml | 4 +++- 2 files changed, 8 insertions(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 371e03e8..4aa5c997 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -26,6 +26,9 @@ Lysand Server `0.7.0` is backwards compatible with `0.6.0`. However, some new fe - Add support for HTTP proxies. - Add support for serving Lysand over a Tor hidden service. - Add global server error handler, to properly return 500 error messages to clients. +- Sign all federation HTTP requests. +- Add JSON schema for configuration file. +- Rewrite federation stack ## Bug Fixes @@ -41,6 +44,8 @@ Lysand Server `0.7.0` is backwards compatible with `0.6.0`. However, some new fe - Make process wait for Ctrl+C to exit on error, instead of exiting immediately. This fixes some issues with Docker restarting endlessly. - Animated media will now stay animated when uploaded. - Some instance metadata will no longer be missing from `/api/v2/instabnce` endpoint. In fact, it will now be more complete than Mastodon's implementation. +- The Origin HTTP header will no longer be used to determine the origin of a request. This was a security issue. +- New notes will no longer incorrectly be federated to *all* remote users at once. ## Removals diff --git a/config/config.example.toml b/config/config.example.toml index 1e656cd4..1235a4d1 100644 --- a/config/config.example.toml +++ b/config/config.example.toml @@ -1,4 +1,6 @@ -#:schema config.schema.json +# This schema always follows the latest dev version of Lysand, which may not be what you want +# Change the URL to the commit/tag you are using +#:schema https://raw.githubusercontent.com/lysand-org/lysand/main/config/config.schema.json [database] # Main PostgreSQL database connection