89e059a084
fix: import resolution within plugin modules ( #11200 )
2 years ago
0bffd3d93c
fix : #11195 , allow users with admin:users privilege to delete users in acp
2 years ago
7d04e95226
fix : #11194 , allow access to sub dashboard pages
2 years ago
f295174e07
test: fix broken test
2 years ago
459bc52338
fix : #11136 , tests, and returning the proper number of arrays
2 years ago
39e009c05a
fix : #11136 , only show mods of active categories when getModeratorUids is called
2 years ago
747cb1f0a1
fix: closes #11173 , clear require cache if wrong dependency is installed
2 years ago
25ae58e8a0
fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config
2 years ago
586eed1407
fix: vulnerability in socket.io nested namespaces ( #11117 )
2 years ago
1ea9481af6
fix: lock post/reply similar to user.create
3 years ago
de31cb1a4f
feat: add force flag to plugin install in cli ( #11089 )
3 years ago
9f531f957e
refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065
3 years ago
896493dbd6
fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type
3 years ago
4314b8e201
Revert "fix: replace input type number with text/pattern"
...
This reverts commit cde4c6ac7e
3 years ago
2bc23a9526
fix: replace input type number with text/pattern
3 years ago
33af2d9c18
feat: integrating basic client-side form validity checking in settings v1 and v2
3 years ago
db8d3a94eb
fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type
3 years ago
d9852c3245
Revert "fix: replace input type number with text/pattern"
...
This reverts commit cde4c6ac7e
3 years ago
45ae31f816
fix: replace input type number with text/pattern
3 years ago
dadbcd731c
feat: integrating basic client-side form validity checking in settings v1 and v2
3 years ago
8c4d6bbebb
Fix: categories.js not showing custom privileges ( #10856 )
...
No shows correctly custom privileges in the Other section for a category.
3 years ago
07a0212571
fix : #11077 , add admin uploads paths to priv mapping
...
closes #11077
3 years ago
4efc19d5f1
feat: add ./nodebb install <plugin_name>
...
will install the suggested version for current nodebb closes #11060
3 years ago
48d1439217
fix: prototype vulnerability in socket.io onMessage
3 years ago
0e495f9ea4
fix : #11066 , fix custom privilege/path in routePrefixMap
...
will find most specific path
3 years ago
c7aa4ebf47
Merge branch 'master' into develop
3 years ago
864fe0f971
feat: add permissions-policy header
3 years ago
110311b25e
fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
...
don't crash if template doesn't have any widgets set before
3 years ago
fc49665fe5
fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
...
don't crash if template doesn't have any widgets set before
3 years ago
bb82eb71e2
fix : #11052 , add missing await
3 years ago
10ba7b9ced
Merge branch 'master' into develop
3 years ago
abcfb63126
fix : #11044 , allow banned users to post
...
if given privileges
3 years ago
3c85b944e3
feat: allow groups to be exempt from maintenance mode
...
closes #11030
3 years ago
6109061501
fix: check schedule privilege, closes #11032
3 years ago
b34e859c1b
refactor: don't prevent startup if staticDir is undefined
...
https://community.nodebb.org/topic/16790/problems-with-upgrading-to-2-xx
3 years ago
97d8b53fd3
Merge branch 'master' into develop
3 years ago
55a197a7d7
fix: check for csrf token on /register/abort, + theme changes for v2.x branches of themes
3 years ago
a31ba824ea
fix: upgrade script to work from 0.x to 2.x
3 years ago
06d1539137
test: fix tests again
3 years ago
b5d38bc696
feat: new search hooks
...
filter:search.isAllowed, allow plugins to check if searching is allowed
filter:search.searchIn, allow searching in custom items
3 years ago
a2fafc2b15
Merge remote-tracking branch 'origin/master' into develop
3 years ago
673261ff98
fix : #10519 , image height in emails
3 years ago
6f673f806f
fix : #10993 , apply autoLocale middleware to guests only
3 years ago
be92be4eee
feat: add search data to filter:search.inContent
3 years ago
e3f2156202
feat: add search data to filter:search.inContent
3 years ago
96b46411b1
Merge branch 'master' into develop
3 years ago
9ee30fe7d2
fix: revert breaking change, add back SocketUser.emailConfirm
3 years ago
9c576a0758
Email confirmation QOL updates ( #10987 )
...
* breaking: remove `SocketUser.emailConfirm`, re: #10954
* chore: move email confirmation related configs to own section in Settings > Email
* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.
* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)
* fix: update getValidationExpiry to return ms
* test: use emailConfirmInterval for tests, for now
* fix: throw friendly error when attempting an email change within email confirmation window
* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for
* test: additional tests for user email methods
* fix: add back missing handling of option
* test: fix tests
3 years ago
09f3ac6574
fix: in appropriately named language key `email-confirm-email2`
3 years ago
7672194c7c
fix: correctly pass dev flag to package installer
3 years ago
Peter Jaszkowiak
Barış Soner Uşaklı
Julian Lam
Opliko
Manuel Valle