e16b6ee6e1
* Escape HTML in the location field of a calendar event post - This allowed script tags to be interpreted in the post display of an event. * Add form security token check to /admin/phpinfo module - This prevents basic XSS attacks against /admin/phpinfo * Add form security token check to /babel module - This prevents basic XSS attacks against /babel * Prevent pass-through for attachments - This addresses a straightforward Reflected XSS vulnerability if a malicious HTML/Javascript file is attached to a post through upload * Prevent overwriting cid on event edit - This allowed to share an event as any other user after zeroing the cid field of an existing event * Check form security token in /settings/userexport module - Prevents basic XSS attacks against /settings/userexport/* |
||
|---|---|---|
| .ddev | ||
| .github/ISSUE_TEMPLATE | ||
| .tx | ||
| .woodpecker | ||
| bin | ||
| config | ||
| doc | ||
| images | ||
| mod | ||
| mods | ||
| spec | ||
| src | ||
| static | ||
| tests | ||
| view | ||
| .codecov.yml | ||
| .editorconfig | ||
| .gitattributes | ||
| .gitignore | ||
| .gitmodules | ||
| .htaccess-dist | ||
| .php-cs-fixer.dist.php | ||
| .php_cs.dist | ||
| CHANGELOG | ||
| composer.json | ||
| composer.lock | ||
| CONTRIBUTING.md | ||
| CREDITS.txt | ||
| database.sql | ||
| docblox.dist.xml | ||
| Doxyfile | ||
| index.php | ||
| LICENSE | ||
| README.md | ||
| ruleset.xml | ||
| security.txt | ||
| update.php | ||
| Vagrantfile | ||
| VERSION | ||
Friendica - your open and free social network
Welcome to the free social web. Friendica is a platform for decentralised social communication linking to other independent social and corporate services.
Friendica connects you to a federated communications network of thousands of servers called the Fediverse. Through various protocols you can interact with anyone on Friendica, Mastodon, Lemmy, Diaspora, Misskey, Peertube, Pixelfed, Pleroma and many more. Receiving content from Tumblr, WordPress and RSS is also possible. Friendica allows to import and mirror your content via add-ons such as ITTT and Buffer. You can control the privacy scope of your content.
Being part of the Fediverse allows you to be free from data-harvesting corporations. Enjoy open social communication, independent of any specific provider.
Join Friendica today or set up your own Friendica instance.
Friendica on desktop
Friendica on mobile
Endorsements
- Friendica is listed on
in the Fediverse category.