Commit Graph

12515 Commits

Author SHA1 Message Date
Julian Lam
25ae58e8a0 fix: move call to filter:middleware.buildHeader out of parallel so that req can be overridden by plugins prior to loading config 2023-01-13 09:53:14 -05:00
Barış Soner Uşaklı
586eed1407 fix: vulnerability in socket.io nested namespaces (#11117) 2022-12-30 09:49:22 -05:00
Barış Soner Uşaklı
1ea9481af6 fix: lock post/reply similar to user.create 2022-12-25 15:05:15 -05:00
Opliko
de31cb1a4f feat: add force flag to plugin install in cli (#11089) 2022-12-21 17:00:35 -05:00
Julian Lam
9f531f957e refactor: flag states so that they are not hardcoded, allow plugins to add additional states, deprecated filter:flags.getFilters hook, closes #11065 2022-12-21 17:00:35 -05:00
Julian Lam
896493dbd6 fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2022-12-21 16:59:10 -05:00
Julian Lam
4314b8e201 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2022-12-21 16:59:10 -05:00
Julian Lam
2bc23a9526 fix: replace input type number with text/pattern 2022-12-21 16:59:10 -05:00
Julian Lam
33af2d9c18 feat: integrating basic client-side form validity checking in settings v1 and v2 2022-12-21 16:59:08 -05:00
Julian Lam
db8d3a94eb fix: change hsts-maxage back to numeric input type, change API token uid input to numeric text type 2022-12-14 14:22:30 -05:00
Julian Lam
d9852c3245 Revert "fix: replace input type number with text/pattern"
This reverts commit cde4c6ac7e.

The changeset was naive in the sense that a lot of the changes inputs actually work better as type="number".
2022-12-14 14:22:30 -05:00
Julian Lam
45ae31f816 fix: replace input type number with text/pattern 2022-12-14 14:22:30 -05:00
Julian Lam
dadbcd731c feat: integrating basic client-side form validity checking in settings v1 and v2 2022-12-14 14:22:30 -05:00
Manuel Valle
8c4d6bbebb Fix: categories.js not showing custom privileges (#10856)
No shows correctly custom privileges in the Other section for a category.
2022-12-09 10:13:38 -05:00
Barış Soner Uşaklı
07a0212571 fix: #11077, add admin uploads paths to priv mapping
closes #11077
2022-12-07 09:55:25 -05:00
Barış Soner Uşaklı
4efc19d5f1 feat: add ./nodebb install <plugin_name>
will install the suggested version for current nodebb closes #11060
2022-11-28 13:13:10 -05:00
Barış Soner Uşaklı
48d1439217 fix: prototype vulnerability in socket.io onMessage 2022-11-27 19:32:35 -05:00
Barış Soner Uşaklı
0e495f9ea4 fix: #11066, fix custom privilege/path in routePrefixMap
will find most specific path
2022-11-25 14:26:37 -05:00
Barış Soner Uşaklı
c7aa4ebf47 Merge branch 'master' into develop 2022-11-23 13:52:33 -05:00
Barış Soner Uşaklı
864fe0f971 feat: add permissions-policy header 2022-11-23 11:33:00 -05:00
Barış Soner Uşaklı
110311b25e fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2022-11-22 19:33:52 -05:00
Barış Soner Uşaklı
fc49665fe5 fix: https://github.com/NodeBB-Community/nodebb-plugin-custom-pages/issues/68
don't crash if template doesn't have any widgets set before
2022-11-22 19:30:58 -05:00
Barış Soner Uşaklı
bb82eb71e2 fix: #11052, add missing await 2022-11-21 13:37:35 -05:00
Julian Lam
10ba7b9ced Merge branch 'master' into develop 2022-11-16 12:16:26 -05:00
Barış Soner Uşaklı
abcfb63126 fix: #11044, allow banned users to post
if given privileges
2022-11-15 17:53:15 -05:00
Barış Soner Uşaklı
3c85b944e3 feat: allow groups to be exempt from maintenance mode
closes #11030
2022-11-11 16:23:00 -05:00
Barış Soner Uşaklı
6109061501 fix: check schedule privilege, closes #11032 2022-11-11 11:14:30 -05:00
Barış Soner Uşaklı
b34e859c1b refactor: don't prevent startup if staticDir is undefined
https://community.nodebb.org/topic/16790/problems-with-upgrading-to-2-xx
2022-11-10 13:31:51 -05:00
Julian Lam
97d8b53fd3 Merge branch 'master' into develop 2022-11-09 12:15:24 -05:00
Julian Lam
55a197a7d7 fix: check for csrf token on /register/abort, + theme changes for v2.x branches of themes 2022-11-09 12:00:59 -05:00
Barış Soner Uşaklı
a31ba824ea fix: upgrade script to work from 0.x to 2.x 2022-11-05 14:44:12 -04:00
Barış Soner Uşaklı
06d1539137 test: fix tests again 2022-10-29 17:40:33 -04:00
Barış Soner Uşaklı
b5d38bc696 feat: new search hooks
filter:search.isAllowed, allow plugins to check if searching is allowed
filter:search.searchIn, allow searching in custom items
2022-10-29 16:57:03 -04:00
Julian Lam
a2fafc2b15 Merge remote-tracking branch 'origin/master' into develop 2022-10-24 14:11:25 -04:00
Barış Soner Uşaklı
673261ff98 fix: #10519, image height in emails 2022-10-23 19:46:54 -04:00
Barış Soner Uşaklı
6f673f806f fix: #10993, apply autoLocale middleware to guests only 2022-10-21 10:23:36 -04:00
Barış Soner Uşaklı
be92be4eee feat: add search data to filter:search.inContent 2022-10-20 20:36:29 -04:00
Barış Soner Uşaklı
e3f2156202 feat: add search data to filter:search.inContent 2022-10-20 20:35:35 -04:00
Julian Lam
96b46411b1 Merge branch 'master' into develop 2022-10-18 15:38:36 -04:00
Julian Lam
9ee30fe7d2 fix: revert breaking change, add back SocketUser.emailConfirm 2022-10-18 15:16:52 -04:00
Julian Lam
9c576a0758 Email confirmation QOL updates (#10987)
* breaking: remove `SocketUser.emailConfirm`, re: #10954

* chore: move email confirmation related configs to own section in Settings > Email

* feat: new user email method `getValidationExpiry`, returns expiration in ms.. probably.

* fix: bug where `user.email.isValidationPending` returned an u nexpected non-boolean value if there was no confirmation pending (only when checking email as well)

* fix: update getValidationExpiry to return ms

* test: use emailConfirmInterval for tests, for now

* fix: throw friendly error when attempting an email change within email confirmation window

* feat: new config option `emailConfirmExpiry` in days, governs how long the confirm link is good for

* test: additional tests for user email methods

* fix: add back missing handling of  option

* test: fix tests
2022-10-18 15:12:13 -04:00
Julian Lam
09f3ac6574 fix: in appropriately named language key email-confirm-email2 2022-10-17 16:49:15 -04:00
Julian Lam
7672194c7c fix: correctly pass dev flag to package installer 2022-10-17 16:13:04 -04:00
Julian Lam
09cfd0bd57 fix: use --omit=dev flag for npm instead of --production 2022-10-17 16:07:26 -04:00
Barış Soner Uşaklı
dd4e9cce09 perf: speed up build
run webpack as soon as js targets are done
this allows building js/css in parallel
2022-10-14 11:04:00 -04:00
Barış Soner Uşaklı
3a70530c8e fix active plugins (#10964) 2022-10-13 10:11:19 -04:00
Barış Soner Uşaklı
67efaeb4b8 fix active plugins (#10964) 2022-10-13 10:09:23 -04:00
Barış Soner Uşaklı
b879b6a0c2 fix: use admin:groups priv for groups (#10960) 2022-10-12 10:02:45 -04:00
Barış Soner Uşaklı
e35b0a869f fix: https://github.com/NodeBB/NodeBB/issues/10525 2022-10-11 20:30:54 -04:00
Barış Soner Uşaklı
ebd5dcc6d6 fix: EEXISTS error on linux if plugin/theme overrides core js file 2022-10-11 08:13:59 -04:00