ec38b18e34
Always compare password with a hash
...
Prevents quick response when user / email doesn't exist
7 years ago
e3a7649290
closes #6027
7 years ago
adc47fd053
Use relative linking ( #6011 )
...
* Use relative linking
* Add copyFile method and tests
Closes #5988
* Fix relative linking on Windows
Hard links and junctions don't work with relative paths
* Fix tests
* Revert ghange to gitignore
7 years ago
18f4f27fe0
closes #6024
7 years ago
5b2a674a4f
closes #6020
7 years ago
25cd21fba8
closes #6019
7 years ago
6b1af76f08
closes #6015
7 years ago
3c45b3edb6
string is removed on develop
7 years ago
d5d6748c71
closes #6013
7 years ago
43bec4cb45
Merge remote-tracking branch 'refs/remotes/origin/master' into develop
7 years ago
6778cce265
add new zset
7 years ago
47143a4a09
Merge remote-tracking branch 'refs/remotes/origin/master' into develop
7 years ago
a500e0019c
closes #6005
7 years ago
103d9a91a9
Revert "sanitizing uploaded filename without using slugify, in composer, re comment in: #6011"
...
This reverts commit 9f670fe586
7 years ago
cb80c7729b
linting
7 years ago
39d67b5b69
Merge branch 'patch-2' of https://github.com/drlukeangel/NodeBB into drlukeangel-patch-2
7 years ago
9f670fe586
sanitizing uploaded filename without using slugify, in composer, re comment in: #6011
7 years ago
999a7abc5d
updated equality operator
...
small update to equality operator
7 years ago
4854888fcf
update blacklist.js to strip ports from v4
...
Blacklist.test in blacklist.js to strip port from ipv4.
my site was passing in
24.18.192.75:52506
and nodebb was giving
28/10 04:34:41 [6680] - error: /login
Error: ipaddr: the address has neither IPv6 nor IPv4 format
So i updated the client Ip to strip the port number if its a v4 IP
7 years ago
9a3a5192c4
add filter:post.shouldQueue
7 years ago
c453fc7275
add widget reset test
7 years ago
2453ce3cb3
strip + validate before hook instead
7 years ago
98eddc78cb
escaping message text in parse.raw
7 years ago
a11058bce2
closes #6004
7 years ago
41fbf7117d
Merge remote-tracking branch 'refs/remotes/origin/master' into develop
7 years ago
a73c2628c4
cache improvements, stats
7 years ago
316fe2773c
remove console.log
7 years ago
2aaf6900d1
closes #5998
7 years ago
056e4f0601
#6004
7 years ago
ce3e1f31ab
fix for #6004
7 years ago
62ae171432
Merge remote-tracking branch 'origin/master' into develop
7 years ago
6a2019c646
closes #6003
7 years ago
e7318a1cea
Mongo cache ( #6002 )
...
* cache mongodb objects
remove user settings cache since it is cached at the object level
* removed indexOf from isMemberOfSets
* change has to get, change maxAge to 0
7 years ago
7ad4420b6a
closes #6000
7 years ago
ab8465d7b6
Make deprecation warnings more clear ( #5996 )
...
* Add these as warnings
To be removed in next major version
* Make ACP search's purpose more clear
* Only warn once per deprecated path
7 years ago
ec3bb1c727
allowing plugins to define upgrade scripts
7 years ago
108f84fd19
add type to dbal
7 years ago
c4310395c9
Merge remote-tracking branch 'refs/remotes/origin/master' into develop
...
# Conflicts:
# package.json
7 years ago
19dc7da42f
closes #5994
7 years ago
79598c32d3
remove unused function
7 years ago
d8dc79e3c7
closes #5992
7 years ago
6a6dc7ef06
closes #5990
7 years ago
8a499e09ed
fix nconf lowercasing
7 years ago
5e6d8ea566
handle 404 first
7 years ago
60a42aa651
Merge branch 'translator-optimization' into develop
7 years ago
cf289b9228
Merge remote-tracking branch 'origin/master' into develop
7 years ago
46fafb20b9
Remove string.js dependency
7 years ago
1c5bdcb670
Enable running multiple upgrades at once ( #5984 )
7 years ago
f9a1951ec5
Enable running multiple upgrades at once
7 years ago
6a93bc140b
Merge remote-tracking branch 'origin/master' into develop
7 years ago
b44cfacda1
resolve XSS vulnerability in flags pages
7 years ago
9101400264
closes #5961
7 years ago
c5f58f73a7
closes #5974
7 years ago
9cbf1597cd
Merge remote-tracking branch 'origin/master' into develop
7 years ago
68bcfb2883
closes #5975
7 years ago
cd6dcff38b
Split up customJS into customHTML and customJS for better organisation ( #5981 )
...
* WIP
* fixed customJS not actually working in footer
* Moving scripts to footer, #5980
* Added upgrade scripts for #5980
7 years ago
500c978a26
closes #5944
7 years ago
410e825bc0
fix upgrade script changing brand:logo to absolute path
7 years ago
645410131d
closes #5942
7 years ago
72502ff992
utilising whitelist instead of blacklisting javascript protocol
7 years ago
5863d64d27
prevent inline js payloads from executing in outgoing page
7 years ago
67ba6bb820
closes #5977
7 years ago
9e9de2edd0
closes #5976
7 years ago
1c35213934
Fix #5970 and forking while debugging ( #5965 )
...
* Fix forking while debugging
Debugger address in use no longer happens
* Fix cropper error
7 years ago
8d5ef79e9c
Smtp emailer change without restart ( #5957 )
...
* SMTP fallback transport setup during app startup and config update
* Verbose logging message to see when SMTP fallback transport is setup
7 years ago
227c245fb2
Merge remote-tracking branch 'origin/master'
...
# Conflicts:
# package.json
7 years ago
0de692188f
check topic.cid
7 years ago
38900a9964
Smtp emailer issue 5951 ( #5954 )
...
* Fixed typo at emailer.js line 66 (serice -> service)
* When custom SMTP user and password is empty no authentication is attempted
* Added options to choose custom smtp connection security
* Made custom smtp connection security strings translatable
* Changed switch to if-else for custom smtp security option
* Fixed emailer.js lint errors
* Move custom setting to top of list
8 years ago
6852c92ed6
Merge remote-tracking branch 'origin/develop'
8 years ago
1fd160a4e6
Add Support for Firefox OSD
8 years ago
2086a64a5e
fixes #5947
8 years ago
b70f328520
closes #5948
8 years ago
da9da8190f
Bump dependencies
...
Bumping eslint & configs meant making some linting fixes
For future reference, the `xmlhttprequest-ssl` library must be of equal versioning to the one in `engine.io-client`, otherwise it won't be deduped which causes the socket.io tests to fail
8 years ago
dc87d7fc0f
Use .js instead of .jst
...
Fix #5934
8 years ago
f989988178
closes #1668
8 years ago
2185480c4e
switch to eachSeries
8 years ago
8276e20254
closes #5937
8 years ago
852396e60d
closes #5903
8 years ago
4c0d430819
only return minimal info for pending and invited users
8 years ago
dea372a5c5
fixes #5932
8 years ago
8b0e6611d9
fixed incorrect parameter passed into hook
8 years ago
c373f85726
Merge remote-tracking branch 'origin/master' into develop
8 years ago
9f4e92fa13
closes #5925
8 years ago
1019feb569
fix method name
8 years ago
f42119673f
fix string cids in post summaries
8 years ago
38a7030639
Revert "Merge pull request #5923 from NodeBB/patch-5922"
...
This reverts commit f8ddabc8844976d13013
8 years ago
f8ddabc884
Merge pull request #5923 from NodeBB/patch-5922
...
Fix #5922
8 years ago
f40d37ad48
Fix #5922
8 years ago
b56d6f8b50
make call to db in /ping and /sping
8 years ago
a6b993ef6c
updating 500-embed to load after page is fully loaded, #5733
8 years ago
26d4c18340
Merge remote-tracking branch 'origin/master' into develop
8 years ago
2c2a28c5b6
closes #5919
8 years ago
4976d13013
removed console log
8 years ago
f7d78771f8
fixes #5921
8 years ago
a4532f011a
Blacklist fix ( #5918 )
...
* closes #5917
* fix callback for upgrade script
* delete key even if falsy, could be empty string
* DRYer ternary
8 years ago
302f06df95
fixes #5914
8 years ago
61b0f0c4c3
Catch uglify errors
8 years ago
d4a11de07d
move blacklist.less into admin/manage/ip-blacklist.less
8 years ago
fdffaf9ed2
re-organized ip blacklist page
8 years ago
1358a89305
closes #5907
8 years ago
Peter Jaszkowiak
Baris Usakli
Barış Soner Uşaklı
Julian Lam
Dr Luke Angel
psychobunny
Dravere
RoiEX