You cannot select more than 25 topics Topics must start with a letter or number, can include dashes ('-') and can be up to 35 characters long.
Julian Lam a344e6ec0c
Fix for #11119, restore password reset rate limiting (#11120)
* chore: incrementing version number - v2.8.1

* chore: update changelog for v2.8.1

* fix: accidental clearing of reset rate limiting on reset send

* test: move user reset tests to its own file, add failing test for user reset locks

* fix: #11119, counter attempted flooding of user reset route

* test: fix password reset socket test to check for error now

* test: same user sending multiple reset emails

should work after waiting the correct amount of time

* lint: fixes

* chore: rename outdated `cleanTokensAndUids` method

* test: no need to create user for new test

Co-authored-by: Misty Release Bot <deploy@nodebb.org>
Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2 years ago
..
admin feat: add dashboard sub-pages to ACP menu 4 years ago
api fix: check schedule privilege, closes #11032 2 years ago
cache feat: allow plugins to add to admin cache list (#10833) 3 years ago
categories fix: category ordering add test 3 years ago
cli feat: add force flag to plugin install in cli (#11089) 2 years ago
controllers fix: lock post/reply similar to user.create 2 years ago
database TTL Cache (#10816) 3 years ago
groups feat: allow groups to be exempt from maintenance mode 2 years ago
messaging feat: closes #10501, minimum reputation to chat 3 years ago
meta Merge branch 'master' into develop 3 years ago
middleware feat: add permissions-policy header 2 years ago
navigation fix: #10528, gray out disabled nav items 3 years ago
plugins refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065 2 years ago
posts fix: #11052, add missing await 2 years ago
privileges Fix: categories.js not showing custom privileges (#10856) 2 years ago
rewards fix: #9827, fix reward duplication 4 years ago
routes feat: allow groups to be exempt from maintenance mode 2 years ago
socket.io Fix for #11119, restore password reset rate limiting (#11120) 2 years ago
topics feat: fire filter:topics.getUnreadTids even if there are no urnead topics 2 years ago
upgrades fix: upgrade script to work from 0.x to 2.x 3 years ago
user Fix for #11119, restore password reset rate limiting (#11120) 2 years ago
views fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2 years ago
widgets fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68 2 years ago
als.js feat: als (#9749) 4 years ago
analytics.js TTL Cache (#10816) 3 years ago
batch.js fix: redis batch 4 years ago
cache.js TTL Cache (#10816) 3 years ago
cacheCreate.js TTL Cache (#10816) 3 years ago
constants.js refactor: shared constants (#8707) 5 years ago
coverPhoto.js chore: eslint prefer-template 4 years ago
emailer.js refactor: replace deprecated String.prototype.substr() (#10432) 3 years ago
events.js feat: new admin events, closes #10405 3 years ago
file.js fix: handle ENOENT on file deletion, closes #10645 3 years ago
flags.js refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065 2 years ago
helpers.js Webpack5 (#10311) 3 years ago
image.js feat: add filter:image.stripEXIF 3 years ago
install.js fix: https://github.com/NodeBB/NodeBB/issues/10525 3 years ago
languages.js fix: translator path traversal 4 years ago
logger.js chore: eslint prefer-rest-params, prefer-spread 4 years ago
notifications.js perf: WIP #10449, allow array of pids for posts.purge (#10465) 3 years ago
pagination.js chore: eslint no-var, vars-on-top 4 years ago
password.js feat: add node 16 (#9847) 4 years ago
prestart.js fix: #10473, trim trailing slashes on config url 3 years ago
promisify.js chore: eslint prefer-rest-params, prefer-spread 4 years ago
pubsub.js chore: eslint no-var, vars-on-top 4 years ago
search.js test: fix tests again 3 years ago
settings.js fix: prevent crash in expandObjBy #9618 4 years ago
sitemap.js fix: #9301, dont call sitemapstream if there are no entries in categories/pages/topics.xml 4 years ago
slugify.js feat: #8734, add slugify module, deprecate utils.slugify 5 years ago
social.js fix: cannot turn off all networks 3 years ago
start.js feat: scheduled topics (#9399) 4 years ago
translator.js Webpack5 (#10311) 3 years ago
upgrade.js feat: Allow defining active plugins in config (#10767) 3 years ago
utils.js test: fix tests again 3 years ago
webserver.js Merge remote-tracking branch 'origin/master' into develop 3 years ago