49eb4d4ddf
* Add honeypot fields to limit non-specialized spam Add two honeypot fields: a fake website input and a fake password confirmation one. The label/placeholder/aria-label tells not to fill them, and they are hidden in CSS, so legitimate users should not fall into these. This should cut down on some non-Mastodon-specific spambots. * Require a 3 seconds delay before submitting the registration form * Fix tests * Move registration form time check to model validation * Give people a chance to clear the honeypot fields * Refactor honeypot translation strings Co-authored-by: Claire <claire.github-309c@sitedethib.com>
68 lines
1.7 KiB
Ruby
68 lines
1.7 KiB
Ruby
# frozen_string_literal: true
|
|
|
|
class AboutController < ApplicationController
|
|
include RegistrationSpamConcern
|
|
|
|
layout 'public'
|
|
|
|
before_action :require_open_federation!, only: [:show, :more]
|
|
before_action :set_body_classes, only: :show
|
|
before_action :set_instance_presenter
|
|
before_action :set_expires_in, only: [:more, :terms]
|
|
before_action :set_registration_form_time, only: :show
|
|
|
|
skip_before_action :require_functional!, only: [:more, :terms]
|
|
|
|
def show; end
|
|
|
|
def more
|
|
flash.now[:notice] = I18n.t('about.instance_actor_flash') if params[:instance_actor]
|
|
|
|
toc_generator = TOCGenerator.new(@instance_presenter.site_extended_description)
|
|
|
|
@contents = toc_generator.html
|
|
@table_of_contents = toc_generator.toc
|
|
@blocks = DomainBlock.with_user_facing_limitations.by_severity if display_blocks?
|
|
end
|
|
|
|
def terms; end
|
|
|
|
helper_method :display_blocks?
|
|
helper_method :display_blocks_rationale?
|
|
helper_method :public_fetch_mode?
|
|
helper_method :new_user
|
|
|
|
private
|
|
|
|
def require_open_federation!
|
|
not_found if whitelist_mode?
|
|
end
|
|
|
|
def display_blocks?
|
|
Setting.show_domain_blocks == 'all' || (Setting.show_domain_blocks == 'users' && user_signed_in?)
|
|
end
|
|
|
|
def display_blocks_rationale?
|
|
Setting.show_domain_blocks_rationale == 'all' || (Setting.show_domain_blocks_rationale == 'users' && user_signed_in?)
|
|
end
|
|
|
|
def new_user
|
|
User.new.tap do |user|
|
|
user.build_account
|
|
user.build_invite_request
|
|
end
|
|
end
|
|
|
|
def set_instance_presenter
|
|
@instance_presenter = InstancePresenter.new
|
|
end
|
|
|
|
def set_body_classes
|
|
@hide_navbar = true
|
|
end
|
|
|
|
def set_expires_in
|
|
expires_in 0, public: true
|
|
end
|
|
end
|