202378b939
fix : #11254 , return check for reroll property
2 years ago
705cd13ad3
fix: closes #11249 , notification uses displayname
2 years ago
b5598a6e5d
fix: wrong link to topics in acp dashboard
2 years ago
d68352cce5
lint: remove unused
2 years ago
0713482bd4
feat: #11240 , only show relevant users in flags assignee list
...
for user flags-> admins + all users who have `admin:users` privilege
for post flags -> admins + global mods + moderators of the category the post is in
refactor getModeratorUids function so it can be used for different privileges
2 years ago
1d3c0e5a2b
fix: https://github.com/NodeBB/NodeBB/issues/11239
...
parseInt uid received from req.body._uid or req.query._uid
2 years ago
6d819b056e
fix: notif filter selecte field
2 years ago
f6c96948fe
fix: import resolution within plugin modules ( #11219 )
...
use module.exports = require('..')
export * from '..' didn't work in some cases
2 years ago
c3653bee60
Revert "fix: import resolution within plugin modules ( #11200 )"
...
This reverts commit 89e059a084
2 years ago
89e059a084
fix: import resolution within plugin modules ( #11200 )
2 years ago
937344b8a8
Merge remote-tracking branch 'origin/master' into develop
2 years ago
0bffd3d93c
fix : #11195 , allow users with admin:users privilege to delete users in acp
2 years ago
7d04e95226
fix : #11194 , allow access to sub dashboard pages
2 years ago
f295174e07
test: fix broken test
2 years ago
38175b5e71
test: fix broken test
2 years ago
fdc41646d1
feat: api v3 route to add email to user, optionally bypassing validation email, closes #11009
2 years ago
eab5ab7ff9
Merge branch 'master' into develop
2 years ago
459bc52338
fix : #11136 , tests, and returning the proper number of arrays
2 years ago
39e009c05a
fix : #11136 , only show mods of active categories when getModeratorUids is called
2 years ago
747cb1f0a1
fix: closes #11173 , clear require cache if wrong dependency is installed
2 years ago
a69bc2cf7f
fix: remove unneeded assignment, as req and locals will not likely ever be completely reassigned
2 years ago
25ae58e8a0
fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config
2 years ago
0a691e6744
fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config
2 years ago
69806662e6
Session Timeout if "Remember Me" is not checked ( #11125 )
...
* fix: convert loginDays and loginSeconds to number inputs
* feat: configurable session timeout for when "Remember Me" is not checked
closes #11124
* test: addition tests to check loginDays and sessionDuration settings
* test: also test loginSeconds override
2 years ago
a344e6ec0c
Fix for #11119 , restore password reset rate limiting ( #11120 )
...
* chore: incrementing version number - v2.8.1
* chore: update changelog for v2.8.1
* fix: accidental clearing of reset rate limiting on reset send
* test: move user reset tests to its own file, add failing test for user reset locks
* fix : #11119 , counter attempted flooding of user reset route
* test: fix password reset socket test to check for error now
* test: same user sending multiple reset emails
should work after waiting the correct amount of time
* lint: fixes
* chore: rename outdated `cleanTokensAndUids` method
* test: no need to create user for new test
Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2 years ago
b81fd81af6
feat: fire filter:topics.getUnreadTids even if there are no urnead topics
2 years ago
586eed1407
fix: vulnerability in socket.io nested namespaces ( #11117 )
2 years ago
1ea9481af6
fix: lock post/reply similar to user.create
2 years ago
de31cb1a4f
feat: add force flag to plugin install in cli ( #11089 )
2 years ago
9f531f957e
refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065
2 years ago
896493dbd6
fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type
2 years ago
4314b8e201
Revert "fix: replace input type number with text/pattern"
...
This reverts commit cde4c6ac7e
2 years ago
2bc23a9526
fix: replace input type number with text/pattern
2 years ago
33af2d9c18
feat: integrating basic client-side form validity checking in settings v1 and v2
2 years ago
db8d3a94eb
fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type
2 years ago
d9852c3245
Revert "fix: replace input type number with text/pattern"
...
This reverts commit cde4c6ac7e
2 years ago
45ae31f816
fix: replace input type number with text/pattern
2 years ago
dadbcd731c
feat: integrating basic client-side form validity checking in settings v1 and v2
2 years ago
8c4d6bbebb
Fix: categories.js not showing custom privileges ( #10856 )
...
No shows correctly custom privileges in the Other section for a category.
2 years ago
07a0212571
fix : #11077 , add admin uploads paths to priv mapping
...
closes #11077
2 years ago
4efc19d5f1
feat: add ./nodebb install <plugin_name>
...
will install the suggested version for current nodebb closes #11060
2 years ago
48d1439217
fix: prototype vulnerability in socket.io onMessage
2 years ago
0e495f9ea4
fix : #11066 , fix custom privilege/path in routePrefixMap
...
will find most specific path
2 years ago
c7aa4ebf47
Merge branch 'master' into develop
2 years ago
864fe0f971
feat: add permissions-policy header
2 years ago
110311b25e
fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
...
don't crash if template doesn't have any widgets set before
2 years ago
fc49665fe5
fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
...
don't crash if template doesn't have any widgets set before
2 years ago
bb82eb71e2
fix : #11052 , add missing await
2 years ago
10ba7b9ced
Merge branch 'master' into develop
2 years ago
abcfb63126
fix : #11044 , allow banned users to post
...
if given privileges
2 years ago
3c85b944e3
feat: allow groups to be exempt from maintenance mode
...
closes #11030
2 years ago
6109061501
fix: check schedule privilege, closes #11032
2 years ago
b34e859c1b
refactor: don't prevent startup if staticDir is undefined
...
https://community.nodebb.org/topic/16790/problems-with-upgrading-to-2-xx
2 years ago
97d8b53fd3
Merge branch 'master' into develop
2 years ago
55a197a7d7
fix: check for csrf token on /register/abort, + theme changes for v2.x branches of themes
2 years ago
a31ba824ea
fix: upgrade script to work from 0.x to 2.x
2 years ago
06d1539137
test: fix tests again
2 years ago
b5d38bc696
feat: new search hooks
...
filter:search.isAllowed, allow plugins to check if searching is allowed
filter:search.searchIn, allow searching in custom items
2 years ago
a2fafc2b15
Merge remote-tracking branch 'origin/master' into develop
2 years ago
673261ff98
fix : #10519 , image height in emails
2 years ago
6f673f806f
fix : #10993 , apply autoLocale middleware to guests only
2 years ago
be92be4eee
feat: add search data to filter:search.inContent
2 years ago
e3f2156202
feat: add search data to filter:search.inContent
2 years ago
96b46411b1
Merge branch 'master' into develop
2 years ago
9ee30fe7d2
fix: revert breaking change, add back SocketUser.emailConfirm
2 years ago
9c576a0758
Email confirmation QOL updates ( #10987 )
...
* breaking: remove `SocketUser.emailConfirm`, re: #10954
* chore: move email confirmation related configs to own section in Settings > Email
* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.
* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)
* fix: update getValidationExpiry to return ms
* test: use emailConfirmInterval for tests, for now
* fix: throw friendly error when attempting an email change within email confirmation window
* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for
* test: additional tests for user email methods
* fix: add back missing handling of option
* test: fix tests
2 years ago
09f3ac6574
fix: in appropriately named language key `email-confirm-email2`
2 years ago
7672194c7c
fix: correctly pass dev flag to package installer
2 years ago
09cfd0bd57
fix: use `--omit=dev` flag for npm instead of `--production`
2 years ago
dd4e9cce09
perf: speed up build
...
run webpack as soon as js targets are done
this allows building js/css in parallel
2 years ago
3a70530c8e
fix active plugins ( #10964 )
2 years ago
67efaeb4b8
fix active plugins ( #10964 )
2 years ago
b879b6a0c2
fix: use admin:groups priv for groups ( #10960 )
2 years ago
e35b0a869f
fix: https://github.com/NodeBB/NodeBB/issues/10525
2 years ago
ebd5dcc6d6
fix: EEXISTS error on linux if plugin/theme overrides core js file
2 years ago
1e4846435a
fix: mixing of old and new bch syntax
2 years ago
1e864a7518
Merge remote-tracking branch 'origin/master' into develop
2 years ago
61d32bdebb
fix: category ordering add test
2 years ago
177d904812
fix: category ordering add test
2 years ago
c0b1ded363
fix more categories button not moving with parent
...
fix order issue
2 years ago
a584dae650
feat: add relevant topic events to post objects
...
see c9604f216a
2 years ago
14515f6004
fix: add lru-cache to checked packages, to fix upgrade issue with lru-cache
2 years ago
53d47a58f6
fix: use `--omit=dev` flag for npm instead of `--production`
2 years ago
6391f77b01
Merge remote-tracking branch 'origin/master' into develop
2 years ago
cf4f5447bb
fix : #10906 , allow `middleware.checkAccountPermissions` to be called with either uid or userslug in params
...
Previously, the middleware only worked with userslug params
2 years ago
b5dd89e1c0
feat: store topic title and tags in diffs ( #10900 )
...
* feat: store topic title and tags in diffs
allow restoring post diff if tags didn't change
* test: fix tests, fast computer problems
2 years ago
fe249fa577
fix: listen to -d flag on cli upgrade
2 years ago
ebd7c05c4c
feat: paginate recentposts.rss and
...
category/1/recentposts.rss
2 years ago
6061d611ea
Merge remote-tracking branch 'origin/master' into develop
2 years ago
8aa1596d23
chore: bring back treding plugins
3 years ago
3d5a6b39d6
lint: fix lint
3 years ago
b392450c36
perf: disable trending plugins, too slow due to nbbpm
3 years ago
665f36b707
feat: add quiet to action:settings.set
...
Makes it possible to ignore quiet updates without abusing the `filter` hook
3 years ago
67cb70352f
fix: missing escape on ACP category backgroundImage property
3 years ago
15b1561fd3
feat: introduce ACP defined option to rescind notif or do nothing on flag resolve/reject
...
/cc #10867
3 years ago
d05705183f
refactor: move export generation logic to v3 controller, GET/HEAD routes for exports
...
re: #10384
3 years ago
0cda5aa3e3
feat: allow v3 api to handle 202 and 204 response codes as well.
3 years ago
8b7cf48ade
Merge remote-tracking branch 'origin/master' into develop
3 years ago
9b96c33d5d
fix: wrap passport.authenticate to pass in keepSessionInfo if not already set
3 years ago
65b3996ac6
fix: removing duplicate session rerolling code (as it is in passport@^0.6 now)
3 years ago
nesro
Barış Soner Uşaklı
Julian Lam
Peter Jaszkowiak
Opliko
Manuel Valle