Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

[F] Add spam detection & public access mitigations #3722

Merged
merged 12 commits into from
Feb 23, 2024
Merged

Conversation

zdavis
Copy link
Member

@zdavis zdavis commented Feb 23, 2024

No description provided.

scryptmouse and others added 12 commits February 21, 2024 22:22
* Finishes up an in-progress branch to make settings easier to grok.
* Normalizes settings into store models rather than arbitrary hash
  with multiple sources of truth across the application
* Tightens up serializer to have parity with new section store models,
  ensures that the API definition actually declares which settings
  can be nil instead of relying on missing keys not tripping the
  validators.
* Improve test coverage over updating settings from environment,
  pulling google drive data out of config files, and handling of
  unknown settings that may get set or exist from legacy use cases.
There was an obvious typo in the original logic that is being fixed
in a separate commit to make it more clear what's happening.

It should now read from the proper section setting.
* This gets rid of an annoying deprecation message that shows up every
  time the app / console boots.
* Behavior is inconsistent between swagger specs and normal request
  specs, causing order-of-operation problems when trying to use
  `let_it_be` / optimizations on certain records. This ensures all
  requests load the normalized contexts for further improvements
  and refinements when testing requests.
* Add akismet integration for detecting spam
* Add new setting for disabling spam detection globally
* Add ability to disable public reading groups
* Require users to be trusted / established when commenting, creating
  a public annotation, or creating a public reading group
* Ensure application is eager loaded before running test suite
* Filter out development / testing-only services to make coverage
  results more meaningful for reviewing gaps
@zdavis zdavis merged commit c0d6fa9 into master Feb 23, 2024
8 checks passed
@zdavis zdavis deleted the ag/mitigations branch February 23, 2024 13:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants