12541 Commits (7bc22a5993b452fca0c4e9b4cb9475dd56913f40)

Author SHA1 Message Date
Julian Lam a382e6e2e5 Merge branch 'master' into develop 2 years ago
nesro 202378b939 fix: #11254, return check for reroll property 2 years ago
Barış Soner Uşaklı 705cd13ad3 fix: closes #11249, notification uses displayname 2 years ago
Julian Lam b5598a6e5d fix: wrong link to topics in acp dashboard 2 years ago
Barış Soner Uşaklı d68352cce5 lint: remove unused 2 years ago
Barış Soner Uşaklı 0713482bd4 feat: #11240, only show relevant users in flags assignee list
for user flags-> admins + all users who have `admin:users` privilege
for post flags -> admins + global mods + moderators of the category the post is in
refactor getModeratorUids function so it can be used for different privileges
2 years ago
Barış Soner Uşaklı 1d3c0e5a2b fix: https://github.com/NodeBB/NodeBB/issues/11239
parseInt uid received from req.body._uid or req.query._uid
2 years ago
Barış Soner Uşaklı 6d819b056e fix: notif filter selecte field 2 years ago
Peter Jaszkowiak f6c96948fe
fix: import resolution within plugin modules (#11219)
use module.exports = require('..')
export * from '..' didn't work in some cases
2 years ago
Barış Soner Uşaklı c3653bee60 Revert "fix: import resolution within plugin modules (#11200)"
This reverts commit 89e059a084.
2 years ago
Peter Jaszkowiak 89e059a084
fix: import resolution within plugin modules (#11200) 2 years ago
Julian Lam 937344b8a8 Merge remote-tracking branch 'origin/master' into develop 2 years ago
Barış Soner Uşaklı 0bffd3d93c fix: #11195, allow users with admin:users privilege to delete users in acp 2 years ago
Barış Soner Uşaklı 7d04e95226 fix: #11194, allow access to sub dashboard pages 2 years ago
Julian Lam f295174e07 test: fix broken test 2 years ago
Julian Lam 38175b5e71 test: fix broken test 2 years ago
Julian Lam fdc41646d1 feat: api v3 route to add email to user, optionally bypassing validation email, closes #11009 2 years ago
Julian Lam eab5ab7ff9 Merge branch 'master' into develop 2 years ago
Julian Lam 459bc52338 fix: #11136, tests, and returning the proper number of arrays 2 years ago
Julian Lam 39e009c05a fix: #11136, only show mods of active categories when getModeratorUids is called 2 years ago
Barış Soner Uşaklı 747cb1f0a1 fix: closes #11173, clear require cache if wrong dependency is installed 2 years ago
Julian Lam a69bc2cf7f fix: remove unneeded assignment, as req and locals will not likely ever be completely reassigned 2 years ago
Julian Lam 25ae58e8a0 fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config 2 years ago
Julian Lam 0a691e6744 fix: move call to `filter:middleware.buildHeader` out of parallel so that req can be overridden by plugins prior to loading config 2 years ago
Julian Lam 69806662e6
Session Timeout if "Remember Me" is not checked (#11125)
* fix: convert loginDays and loginSeconds to number inputs

* feat: configurable session timeout for when "Remember Me" is not checked

closes #11124

* test: addition tests to check loginDays and sessionDuration settings

* test: also test loginSeconds override
2 years ago
Julian Lam a344e6ec0c
Fix for #11119, restore password reset rate limiting (#11120)
* chore: incrementing version number - v2.8.1

* chore: update changelog for v2.8.1

* fix: accidental clearing of reset rate limiting on reset send

* test: move user reset tests to its own file, add failing test for user reset locks

* fix: #11119, counter attempted flooding of user reset route

* test: fix password reset socket test to check for error now

* test: same user sending multiple reset emails

should work after waiting the correct amount of time

* lint: fixes

* chore: rename outdated `cleanTokensAndUids` method

* test: no need to create user for new test

Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2 years ago
Barış Soner Uşaklı b81fd81af6 feat: fire filter:topics.getUnreadTids even if there are no urnead topics 2 years ago
Barış Soner Uşaklı 586eed1407
fix: vulnerability in socket.io nested namespaces (#11117) 2 years ago
Barış Soner Uşaklı 1ea9481af6 fix: lock post/reply similar to user.create 2 years ago
Opliko de31cb1a4f feat: add force flag to plugin install in cli (#11089) 2 years ago
Julian Lam 9f531f957e refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065 2 years ago
Julian Lam 896493dbd6 fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2 years ago
Julian Lam 4314b8e201 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2 years ago
Julian Lam 2bc23a9526 fix: replace input type number with text/pattern 2 years ago
Julian Lam 33af2d9c18 feat: integrating basic client-side form validity checking in settings v1 and v2 2 years ago
Julian Lam db8d3a94eb fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2 years ago
Julian Lam d9852c3245 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2 years ago
Julian Lam 45ae31f816 fix: replace input type number with text/pattern 2 years ago
Julian Lam dadbcd731c feat: integrating basic client-side form validity checking in settings v1 and v2 2 years ago
Manuel Valle 8c4d6bbebb
Fix: categories.js not showing custom privileges (#10856)
No shows correctly custom privileges in the Other section for a category.
2 years ago
Barış Soner Uşaklı 07a0212571 fix: #11077, add admin uploads paths to priv mapping
closes #11077
2 years ago
Barış Soner Uşaklı 4efc19d5f1 feat: add ./nodebb install <plugin_name>
will install the suggested version for current nodebb closes #11060
2 years ago
Barış Soner Uşaklı 48d1439217 fix: prototype vulnerability in socket.io onMessage 2 years ago
Barış Soner Uşaklı 0e495f9ea4 fix: #11066, fix custom privilege/path in routePrefixMap
will find most specific path
2 years ago
Barış Soner Uşaklı c7aa4ebf47 Merge branch 'master' into develop 2 years ago
Barış Soner Uşaklı 864fe0f971 feat: add permissions-policy header 2 years ago
Barış Soner Uşaklı 110311b25e fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2 years ago
Barış Soner Uşaklı fc49665fe5 fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2 years ago
Barış Soner Uşaklı bb82eb71e2 fix: #11052, add missing await 2 years ago
Julian Lam 10ba7b9ced Merge branch 'master' into develop 2 years ago