summaryrefslogtreecommitdiff
path: root/actions
AgeCommit message (Expand)Author
2008-08-29CSRF protection in emailsettingsZach Copley
2008-08-29CSRF protection in user registrationEvan Prodromou
2008-08-29CSRF protection in recoverpasswordZach Copley
2008-08-29session token in userauthorization formEvan Prodromou
2008-08-29csrf protection in userauthorizationEvan Prodromou
2008-08-29better client error on CSRF problem with subscribe/unsubscribeEvan Prodromou
2008-08-29CSRF protection for subscription/unsubscriptionEvan Prodromou
2008-08-28CSRF protection in imsettings.phpZach Copley
2008-08-28CSRF protection in smssettings.phpZach Copley
2008-08-29add csrf protection to profile settingsEvan Prodromou
2008-08-29CSRF protection in openidsettingsEvan Prodromou
2008-08-29swap around some stuff to show the form correctly on a CSRF error in openidloginEvan Prodromou
2008-08-28CSRF protection for OpenID formEvan Prodromou
2008-08-28add a token for CSRF avoidanceEvan Prodromou
2008-08-28show error in delete noticeEvan Prodromou
2008-08-28CSRF protection in deletenoticeEvan Prodromou
2008-08-28add CSRF protection to avatarEvan Prodromou
2008-08-28return after failed tokenEvan Prodromou
2008-08-28add session token check to password changeEvan Prodromou
2008-08-26fix error storing uris of remote noticesEvan Prodromou
2008-08-24notify user of remote subscriptionsEvan Prodromou
2008-08-23be a little more liberal for sites that accidentally put whitespace before th...Evan Prodromou
2008-08-23request token is not readonlyEvan Prodromou
2008-08-22XMPP sub/unsub and help commandsCiaranG
2008-08-22better error reporting in user authorization actionEvan Prodromou
2008-08-22local-only is optional on public timelineEvan Prodromou
2008-08-19Twitter-compatible API - RESTfulness checks as per Twitterzach
2008-08-19Twitter-compatible API - /statuses/show - better err msg if notice doesn't existzach
2008-08-19Twitter-compatible API - Added /statuses/followers to methods thatzach
2008-08-19Twitter-compatible API - /statuses/destroy method implementedzach
2008-08-18Twitter-compatible API - moved show() to the right filezach
2008-08-18Twitter-compatible API - running all strings through gettext() nowzach
2008-08-19add remote flag to broadcast of noticesEvan Prodromou
2008-08-19broadcast remote noticesEvan Prodromou
2008-08-17accept 140 chars in API, tooEvan Prodromou
2008-08-17typo in forgotten password stringEvan Prodromou
2008-08-17debug for content too longEvan Prodromou
2008-08-17accept 140-character UTF-8 strings to contentEvan Prodromou
2008-08-16name omb_listener param so we can refer to it in error msgEvan Prodromou
2008-08-15Twitter-compatible API: support for new in_reply_to_status_id in statuses/updatezach
2008-08-13Twitter-compatible API: removed redundant decoding step; already taken care o...zach
2008-08-13move user registration to a single static methodEvan Prodromou
2008-08-11fix problem with new noticesEvan Prodromou
2008-07-31Twitter-compatible API - /statuses/update.format now decodes HTML chars, such...zach
2008-08-11make tag dropoff configurableEvan Prodromou
2008-08-11emergency fixup for bad notices in notice searchEvan Prodromou
2008-08-05make init of lang environment happen earlier, or when user language may have ...Evan Prodromou
2008-08-04better handling of unconfirmed email addressesEvan Prodromou
2008-08-04use an outstanding unconfirmed email address for password recovery if availableEvan Prodromou
2008-08-04change no-such-user error to a 404 instead of a 400Evan Prodromou