Commit Graph

1498 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
23810cc64b fix: #8133, check if user is in room before removing 2020-01-23 22:40:14 -05:00
Baris Usakli
418c174d56 fix: dont return flag data to client 2020-01-23 12:48:21 -05:00
Barış Soner Uşaklı
51236df4ed fix: check if user has read priv before flagging 2020-01-22 12:14:50 -05:00
Barış Soner Uşaklı
1f13ab8a19 fix: restrict getUsersInRoom to members 2020-01-22 11:46:26 -05:00
Julian Lam
ecc579a29c fix: tests for messaging 2020-01-21 14:35:50 -05:00
Barış Soner Uşaklı
1b08f37612 fix: tests, was using hardcoded message id 2020-01-20 11:15:26 -05:00
Barış Soner Uşaklı
bfaba89557 Merge branch 'master' of https://github.com/NodeBB/NodeBB 2020-01-20 10:59:22 -05:00
Julian Lam
8e5a2276af feat: check flag values on save (assignee and state) (#8122)
* feat: add assignee checking when updating flag

Prior to this, it was possible to update the assignee to any value (or
any user. This commit adds checking to allow only admins, global
moderators, or in the case of flagged posts, moderators.

Also some prep work was added for value checking `state`.

* feat: value checking `state` on flag update

The state should be one of the constants defined earlier in the file.
2020-01-20 10:19:23 -05:00
Barış Soner Uşaklı
6a63c1a100 fix: escape system message, don't allow editing system messages 2020-01-19 22:20:43 -05:00
Barış Soner Uşaklı
8c6a7954cf fix: delete upload 2020-01-19 14:57:06 -05:00
Barış Soner Uşaklı
01d1ae78c8 fix: #8120, bubble errors from static hooks 2020-01-17 13:30:57 -05:00
Barış Soner Uşaklı
3e52557689 fix: change owner missing await 2020-01-17 11:16:23 -05:00
Barış Soner Uşaklı
e06c1bfcd2 fix: escape config.userLang/acpLang, don't allow invalid language codes 2020-01-13 12:27:50 -05:00
Barış Soner Uşaklı
61da8c29ac fix: group create/join/update name validation 2020-01-07 15:40:54 -05:00
Barış Soner Uşaklı
10989cccaa fix: meta description missing if url doesn't have post index 2019-12-30 22:19:00 -05:00
Barış Soner Uşaklı
9d074731f4 fix: login with weak password 2019-12-26 20:17:54 -05:00
Baris Usakli
c2cd7de891 fix: #8069, dont show hidden groups in search 2019-11-29 13:35:50 -05:00
Opliko
0efe27b1f2 fix: make _csrf a secure cookie if the website is using https (#8045)
* Make _csrf a secure cookie if the website is using https

* fix style for TravsCI

* Add `url_parsed` to databasemock
2019-11-18 13:07:05 -05:00
Barış Soner Uşaklı
480a64aaa7 feat: #7467, pass query params when redirecting to posts 2019-11-05 19:51:01 -05:00
Barış Soner Uşaklı
e3c9dafa08 fix: tests 2019-11-01 22:13:00 -04:00
Barış Soner Uşaklı
1cedc4a0d6 feat: #7957, allow post queue based on group
allow multiple select in ACP pages
2019-10-28 14:36:14 -04:00
Julian Lam
cf7e0cfd2d feat: no more session cookie for guests (#7982)
* feat: no more session cookie for guests

* fix(tests): added additional tests and fixed the broken test
2019-10-22 13:38:36 -04:00
Barış Soner Uşaklı
441dd86d29 fix: convert param to string in slugify
fixes adding users to privilege table
2019-10-17 18:55:56 -04:00
Barış Soner Uşaklı
ca3be1f336 fix: #7974 (#7976) 2019-10-16 13:33:00 -04:00
Baris Usakli
0da4f7ee8d fix: event tests 2019-10-11 12:44:34 -04:00
Barış Soner Uşaklı
661a0f5068 fix: don't show deleted topics on unread 2019-10-09 18:03:07 -04:00
Barış Soner Uşaklı
75bcb0f484 fix: remove unused data from post/topic/user hashes 2019-10-07 23:13:43 -04:00
Barış Soner Uşaklı
6fb29e8408 fix: tests 2019-10-07 12:46:48 -04:00
Barış Soner Uşaklı
02d38caf47 refactor: async/await 2019-10-05 17:05:52 -04:00
Barış Soner Uşaklı
3caa387ac6 fix: tests 2019-10-01 11:09:44 -04:00
Baris Usakli
9c051386d5 fix: tests 2019-09-30 17:15:50 -04:00
Barış Soner Uşaklı
ffe3670ff5 feat: deprecate file.isFileTypeAllowed
use image.isFileTypeAllowed, this function was always meant for images
2019-09-29 19:53:03 -04:00
Barış Soner Uşaklı
310c6fd33f properly filter /unread /recent /popular /top (#7927)
* feat: add failing test for pagination

* feat: test

* fix: redis tests

* refactor: remove logs

* fix: add new test

* feat: make sortedSetRangeByScore work with keys on redis

* fix: hardcoded set name

* feat: show topics from readable categories on recent/popular/top

* feat: rewrite unread topics

respect watched categories and followed topics

* fix: term + watched
2019-09-26 21:55:49 -04:00
Barış Soner Uşaklı
22b02f1407 feat: add failing test for pagination (#7924)
* feat: add failing test for pagination

* feat: test

* fix: redis tests

* refactor: remove logs
2019-09-25 21:06:57 -04:00
Barış Soner Uşaklı
b602c04463 feat: refactor getSortedSetRange to allow big arrays 2019-09-24 23:47:45 -04:00
Baris Usakli
1e5246f9ad feat: add new test 2019-09-24 13:31:44 -04:00
Barış Soner Uşaklı
f9d6912b4a refactor: async/await file 2019-09-23 22:30:17 -04:00
Barış Soner Uşaklı
96ab8d05aa fix: only allow png/jpg/bmp in cover/profile images 2019-09-21 23:10:49 -04:00
Baris Usakli
ecf39727cc fix: #7912 2019-09-20 11:44:49 -04:00
Opliko
b9583ed838 Add privilege for accessing user information (#7859)
* Add view users info global privilege

* Show user ip only to global mods and admins

* fix missing comma

* Hide link for users without correct privilege

* move getting privilege information to getAllData

* Hide the link from Global Moderators as well

* Give Global Moderator view:users:info privilege

* Restrict ip in post menu to view:users:info

* add some trailing commas....

* Add privilege to categories test

* Add group privilege to categories test

* add upgrade script

* fix style for TravisCI

* more styling - change spaces to tabs

* some more styling fixes (hopefully final one)

* fix style for Travis CI

* hide ip in chat messages

* Don't show even hidden ips on user profile page
2019-09-17 14:02:52 -04:00
Barış Soner Uşaklı
de4619689b fix: change params 2019-09-17 09:12:45 -04:00
Julian Lam
1796b65d34 feat: option to restrict group leaving, closes #7770 2019-09-05 12:01:42 -04:00
Julian Lam
30a86ed553 fix: #7853, dissociation on post purge 2019-09-04 16:59:04 -04:00
Barış Soner Uşaklı
aea04de094 feat: update LESS to v3.x, #7855 (#7867)
* feat: #7855

* fix: tests
2019-08-28 11:22:39 -04:00
Barış Soner Uşaklı
f15c7f12b3 refactor: async/await 2019-08-19 23:17:43 -04:00
Barış Soner Uşaklı
1e0190abef fix: #7842, groups.invite works with an array of uids 2019-08-18 21:51:32 -04:00
Barış Soner Uşaklı
fa26855671 feat: #7842, make isInvited, isPending work with uids 2019-08-18 20:57:14 -04:00
Julian Lam
c44bf48c01 fix: removed console.logs 2019-08-14 15:20:13 -04:00
Julian Lam
f736f0b382 fix: broken tests from 71b205a889 2019-08-14 15:19:00 -04:00
Barış Soner Uşaklı
23046bab9a Merge branch 'master' of https://github.com/NodeBB/NodeBB 2019-07-30 16:44:11 -04:00