Barış Soner Uşaklı
c1b47fbf4d
Merge branch 'master' into develop
2025-06-11 17:14:08 -04:00
Barış Soner Uşaklı
da2597f81c
fix: sanitize svg when uploading site-logo, default avatar and og:image
2025-06-11 17:13:56 -04:00
Barış Soner Uşaklı
dc37789b5d
refactor: send single message
2025-06-11 13:16:52 -04:00
Eli Sheinfeld
84d99a0fc7
feat: Add live reload functionality with Grunt watch and Socket.IO ( #13489 )
...
- Added livereload event to Grunt watch tasks for instant browser refresh
- Integrated Socket.IO WebSocket communication for real-time updates
- Enhanced development workflow with immediate file change detection
- Improved developer experience with automatic browser reload on file changes
Changes:
- Gruntfile.js: Send livereload message when files change
- src/start.js: Handle livereload events and broadcast via Socket.IO
2025-06-11 13:13:23 -04:00
Barış Soner Uşaklı
341b570d0d
Merge branch 'master' into develop
2025-06-10 10:47:22 -04:00
Barış Soner Uşaklı
14e30c4bf8
feat: closes #13484 , post preview changes
...
don't close preview when mouse leaves the anchor
close preview on click outside
close preview when mouseleaves preview
open the preview to the top if there isn't enough space
add scrollbar to post preview
2025-06-10 10:47:14 -04:00
Barış Soner Uşaklı
61870b76bb
Merge branch 'master' into develop
2025-06-09 11:08:32 -04:00
Barış Soner Uşaklı
b02eb57d06
fix: escape, query params
2025-06-09 10:23:00 -04:00
Barış Soner Uşaklı
d3a2dcf074
Merge branch 'master' into develop
2025-06-05 11:46:05 -04:00
Barış Soner Uşaklı
806e54bf5a
fix: closes #13475 , don't store escaped username
...
when updating profile
2025-06-05 11:42:29 -04:00
Julian Lam
6478532bf5
fix: ensure check returns false if no addresses are looked up, fix bug where cached value got changed accidentally
2025-06-05 11:28:47 -04:00
Barış Soner Uşaklı
677d6dd060
Merge branch 'master' into develop
2025-06-05 07:16:00 -04:00
Barış Uşaklı
4fbcfae8b1
Post queue write api ( #13473 )
...
* move post queue from socket.io to rest api
* move harmony post-queue to core
add canEdit, allow users to edit their queued posts
* fix: openapi spec
* lint: whitespace
2025-06-05 07:15:45 -04:00
Julian Lam
010113a9a0
fix: wrap cached returns for dns lookups in nextTick
2025-06-04 13:19:33 -04:00
Julian Lam
6411c19765
fix : #13459 , unread indicators for remote categories
2025-06-02 11:58:54 -04:00
Julian Lam
a8e613e13a
fix: further guard against DNS rebinding attack
2025-06-02 11:05:35 -04:00
Julian Lam
70c04f0cb2
fix: undefined check, allow plugins to append to allow list
2025-06-02 11:05:35 -04:00
Julian Lam
df36021628
fix: simplify dns to use .lookup instead of .resolve4 and .resolve6, automatically allow requests to own hostname
2025-06-02 11:05:35 -04:00
Julian Lam
9d3b8c3abc
feat: add protection mechanism to request lib so that network requests to reserved IP ranges throw an error
2025-06-02 11:05:35 -04:00
Julian Lam
524a1e8bfe
fix: return 200 for non-implemented activities instead of 501
2025-06-02 10:15:05 -04:00
Barış Soner Uşaklı
b1022566da
fix: closes #13458 , check if plugin is system
...
plugin before activate/deactive/install/uninstall
2025-06-02 09:55:20 -04:00
Julian Lam
fcb3bfbc35
fix: return 200 for non-implemented activities instead of 501
2025-06-01 12:40:42 -04:00
Julian Lam
3d88f70680
Merge branch 'master' into develop
2025-06-01 00:32:05 -04:00
Julian Lam
cc92702620
fix: add try..catch around topics.post in note assertion logic
2025-06-01 00:31:58 -04:00
Julian Lam
f34930f5e8
Merge branch 'master' into develop
2025-05-31 22:47:06 -04:00
Julian Lam
83a55f6adc
fix: don't throw on unknown post on Undo(Like)
2025-05-31 22:46:47 -04:00
Julian Lam
4d44456ff9
Merge branch 'master' into develop
2025-05-30 16:49:24 -04:00
Julian Lam
629eec7b5b
fix: add try..catch wrapper around Announce(Like) call to internal method so as to not return a 500 — just drop the Like activity
2025-05-30 16:49:15 -04:00
Barış Soner Uşaklı
ebb88c1277
feat: add action:post-queue.save
...
fires after a post is added to the post queue
2025-05-30 11:45:04 -04:00
Barış Soner Uşaklı
57a5de2682
refactor: use strings for cids
2025-05-30 11:15:02 -04:00
Barış Soner Uşaklı
28c021a01b
fix: remove null categories
2025-05-30 11:11:45 -04:00
Barış Soner Uşaklı
8d16367ad4
Merge branch 'master' into develop
2025-05-30 11:02:56 -04:00
Barış Soner Uşaklı
390f642850
fix: browser title translation
2025-05-30 11:00:08 -04:00
Barış Soner Uşaklı
78de8c6da1
fix: allow guests to load topic tools if they have privilege to view them
...
display errors from topics.loadTopicTools
2025-05-30 09:22:06 -04:00
Julian Lam
a80edfa1f1
fix: patch ap .probe() so that it does not execute on requests for its own resources
2025-05-29 15:15:06 -04:00
Julian Lam
20abeade41
Merge branch 'master' into develop
2025-05-28 14:53:38 -04:00
Julian Lam
49b5268e52
fix: send actor in undo(follow)
2025-05-28 14:53:32 -04:00
Julian Lam
b20a6ed0d7
fix: missed handling zset on ap unfollow
2025-05-28 12:31:53 -04:00
Julian Lam
a888b868c7
fix: additional tests for remote privileges, enforcing privileges for remote edits and deletes
2025-05-26 14:49:48 -04:00
Barış Soner Uşaklı
e16420a4eb
Merge branch 'master' into develop
2025-05-25 19:04:33 -04:00
Julian Lam
e70e990a1a
feat: restrict access to ap.probe method to registered users, add rate limiting protection
2025-05-22 14:13:41 -04:00
Barış Uşaklı
385f4f12be
replace connect-multiparty with Multer ( #13439 )
...
* post upload route
* more multer changes
keep name and type fields in file objects so we dont break all plugins using these
* remove log
* fix: thumbs delete
* test: add array check
2025-05-20 10:45:56 -04:00
Barış Soner Uşaklı
0a574d7240
fix: group edit url
2025-05-15 18:23:38 -04:00
Julian Lam
8f9f377121
fix: add attachments to getpostsummaries call in search, #13324
2025-05-15 16:57:05 -04:00
Julian Lam
a460a55064
fix: bring back auto-categorization if group and object are same-origin, handle Peertube putting channel names in attributedTo
2025-05-15 15:40:01 -04:00
Julian Lam
3674fa5783
feat: save width and height values into post attachment
2025-05-15 13:56:31 -04:00
Julian Lam
45a11d45fc
fix : #13419 , handle remote content with mediaType text/markdown
2025-05-15 12:01:45 -04:00
Barış Soner Uşaklı
6c3e2a8e22
refactor: create date once per digest.send
2025-05-15 09:42:55 -04:00
Barış Soner Uşaklı
3faae559a8
Merge branch 'master' of https://github.com/NodeBB/NodeBB
2025-05-15 09:38:49 -04:00
Barış Soner Uşaklı
3d96afb2d1
feat: use local date string for digest subject
...
closes #13420
2025-05-15 09:38:43 -04:00