Commit Graph

12835 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
8e0561f226 perf: cache Topics.getTopicsTags 2021-07-07 11:42:19 -04:00
Barış Soner Uşaklı
10ddfff38f perf: bypass getMultipleUserSettings 2021-07-07 09:58:06 -04:00
Julian Lam
e03782f218 fix(docs): #9648 2021-07-07 09:33:26 -04:00
Barış Soner Uşaklı
c9348efbdc feat: add merge/fork hooks 2021-07-05 10:02:42 -04:00
Julian Lam
b896484351 fix: #9634, re-jig top bar of Admin > Manage > Users 2021-06-30 17:43:16 -04:00
gasoved
97c8569a79 fix: hide private user data in api/v3/users/[uid] 2021-06-30 17:02:38 -04:00
Barış Soner Uşaklı
d9e2190a6b fix: numThumb upgrade script 2021-06-30 11:08:55 -04:00
Barış Soner Uşaklı
fee782c436 fix: acp dashboard sometimes not loading on cold load 2021-06-30 10:38:15 -04:00
Julian Lam
849049765b fix: #9636, sanitize all attributes in meta and link tags 2021-06-28 13:17:22 -04:00
Julian Lam
acdbd04913 fix: #9627 2021-06-25 13:56:21 -04:00
Anton Grigoryev
db65360c0d fix(post-queue): moderatedCids is an array of numbers (#9631) 2021-06-24 19:04:37 -04:00
Barış Soner Uşaklı
52596902a6 feat: #9617 update fa link 2021-06-22 13:16:59 -04:00
Barış Soner Uşaklı
909db3ae71 Merge branch 'master' of https://github.com/NodeBB/NodeBB 2021-06-22 12:36:00 -04:00
Barış Soner Uşaklı
ab6f062ff9 fix: prevent crash in expandObjBy #9618 2021-06-22 12:35:53 -04:00
Barış Soner Uşaklı
1bf263c4a2 9622 (#9625)
* fix: #9622

dont allow regular user to remove system tags

* refactor: add guest/spider check to isPrivileged

string/trim tag
2021-06-22 12:21:52 -04:00
Barış Soner Uşaklı
0d975bc4fb fix: dont show system tags in whitelist dropdown to regular users 2021-06-22 12:21:40 -04:00
Barış Soner Uşaklı
84e065752f fix: #9622 (#9623)
dont allow regular user to remove system tags
2021-06-22 11:09:32 -04:00
Barış Soner Uşaklı
73f40e96a5 fix: #9620, fix notif delay 2021-06-21 11:17:57 -04:00
Barış Soner Uşaklı
c92fc19b5c fix: #9619, add group chat filter to /notifications 2021-06-21 10:02:18 -04:00
Barış Soner Uşaklı
3cd9434b56 fix: scope 2021-06-18 12:36:04 -04:00
Barış Soner Uşaklı
1eda538da5 fix: #9615, catch exceptions in renderOverride 2021-06-18 12:24:07 -04:00
Barış Soner Uşaklı
46a454f194 feat: add bodyClass to 500 page 2021-06-18 09:55:08 -04:00
gasoved
8168c6c407 fix: purge uploaded images accordingly #9606 (#9611)
* fix: purge uploaded images accordingly

* fix: tests

* fix: relative paths
2021-06-18 09:21:23 -04:00
Julian Lam
a2400f6baf fix: accidental unnecessarily strict conditional that effectively rendered SSO state checking opt-in instead of opt-out 2021-06-14 14:13:39 -04:00
Julian Lam
f9728aff2c feat: clear reset tokens on successful login 2021-06-14 11:50:36 -04:00
Julian Lam
5c42b3eab0 test: fixed broken tests from #9605, removed token clean on token usage as it is superceded by token clean on generation (+ associated test) 2021-06-11 15:43:03 -04:00
Julian Lam
f6c14d6b62 fix: introduce artificial delay + delay fudging on invalid email during reset token generation 2021-06-11 14:47:13 -04:00
Julian Lam
229f96f872 fix: #9605, expire all active reset tokens for a uid if that uid generates a new one 2021-06-11 14:39:00 -04:00
Barış Soner Uşaklı
8c952aa381 fix: lint 2021-06-11 09:57:40 -04:00
Barış Soner Uşaklı
be19f27f40 feat: add filter:categories.categorySearch 2021-06-11 09:47:23 -04:00
Barış Soner Uşaklı
cc0cf99fed feat: allow nested properties on category page (#9601)
* feat: allow nested properties on category page

* fix: remove debug

* fix: remove debug
2021-06-09 17:40:36 -04:00
Barış Soner Uşaklı
8ea58432c9 feat: show ip on acp manage users
update url on search
show matching ip when searching by ip
add ip to export csv
2021-06-08 11:50:52 -04:00
Barış Soner Uşaklı
6695927ea9 fix: pagination on acp users search 2021-06-08 10:00:51 -04:00
psychobunny
05cc7ccb60 feat: make undoTimeout configurable, closes #9599 2021-06-07 14:44:12 -04:00
Mats
2b42e7edb0 chore: lint 2021-06-07 10:54:07 -04:00
Mats
6f73261186 fix: extra ')' 2021-06-07 10:54:07 -04:00
Mats
d07229aa6b chore: fix indentation 2021-06-07 10:54:07 -04:00
Mats
edcba61aa9 fix: disallow editing of other users' notes
Feel free to close this if it is intentional, but as you are not allowed to delete other users notes I expect you shouldn't be able to edit them. Editing another users post also changes ownership, allowing you to then delete it.

I also added `error:` to the errormessage so that they display properly.
2021-06-07 10:54:07 -04:00
Barış Soner Uşaklı
ca72aa93d7 Locks bug failing test (#9595)
* test: failing test for issue

* fix: #9593, don't lock if email is identical to username

* fix: lock calls after first call

* fix: add back email check

* test: remove invalid test

Co-authored-by: Julian Lam <julian@nodebb.org>
2021-06-07 10:26:00 -04:00
Julian Lam
816856b0c6 feat: introduce boolean res.locals flag to bypass session reroll (used by session-sharing)
The session reroll logic is still standard practice, but in some cases, it is not necessary or causes UX issues. An issue opened in session sharing (julianlam/nodebb-plugin-session-sharing#95) brought this to attention in that parsing the cookie to log in the user caused a reroll (as expected), but caused the session open on other tabs to be mismatched. If "re-validate" was turned on, it basically meant that it was not possible to use NodeBB with multiple tabs.

Session sharing now sets `reroll` to `false` if re-validate is enabled.
2021-06-04 11:37:06 -04:00
Barış Soner Uşaklı
286644d0b8 fix: #9592, check session 2021-06-04 09:41:23 -04:00
Barış Soner Uşaklı
3717df610a fix: don't crash if session doesn't exist 2021-06-03 17:11:25 -04:00
Barış Soner Uşaklı
66cae54ee3 fix: lint 2021-06-01 11:26:18 -04:00
Barış Soner Uşaklı
57e46e41e3 feat: allow modifying default category privileges 2021-06-01 11:21:15 -04:00
Julian Lam
16e0bca570 fix: improper use of filename extensions 2021-05-28 14:05:30 -04:00
Barış Soner Uşaklı
d8d6c98970 fix: return null 2021-05-28 12:32:52 -04:00
Barış Soner Uşaklı
ac7b093f99 feat: add filter:notifications.create 2021-05-28 12:31:49 -04:00
Barış Soner Uşaklı
3fb7444580 fix: returnOriginal deprecation
https://github.com/mongodb/node-mongodb-native/pull/2808
2021-05-28 11:12:21 -04:00
Barış Soner Uşaklı
3d5fef6e80 feat: pass req.query to getUnreadData 2021-05-27 10:02:54 -04:00
Julian Lam
d2960aeb09 feat: added GET user route for api v3 2021-05-26 12:35:37 -04:00