Commit Graph

14791 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
c1b47fbf4d Merge branch 'master' into develop 2025-06-11 17:14:08 -04:00
Barış Soner Uşaklı
da2597f81c fix: sanitize svg when uploading site-logo, default avatar and og:image 2025-06-11 17:13:56 -04:00
Barış Soner Uşaklı
dc37789b5d refactor: send single message 2025-06-11 13:16:52 -04:00
Eli Sheinfeld
84d99a0fc7 feat: Add live reload functionality with Grunt watch and Socket.IO (#13489)
- Added livereload event to Grunt watch tasks for instant browser refresh
- Integrated Socket.IO WebSocket communication for real-time updates
- Enhanced development workflow with immediate file change detection
- Improved developer experience with automatic browser reload on file changes

Changes:
- Gruntfile.js: Send livereload message when files change
- src/start.js: Handle livereload events and broadcast via Socket.IO
2025-06-11 13:13:23 -04:00
Barış Soner Uşaklı
341b570d0d Merge branch 'master' into develop 2025-06-10 10:47:22 -04:00
Barış Soner Uşaklı
14e30c4bf8 feat: closes #13484, post preview changes
don't close preview when mouse leaves the anchor
close preview on click outside
close preview when mouseleaves preview
open the preview to the top if there isn't enough space
add scrollbar to post preview
2025-06-10 10:47:14 -04:00
Barış Soner Uşaklı
61870b76bb Merge branch 'master' into develop 2025-06-09 11:08:32 -04:00
Barış Soner Uşaklı
b02eb57d06 fix: escape, query params 2025-06-09 10:23:00 -04:00
Barış Soner Uşaklı
d3a2dcf074 Merge branch 'master' into develop 2025-06-05 11:46:05 -04:00
Barış Soner Uşaklı
806e54bf5a fix: closes #13475, don't store escaped username
when updating profile
2025-06-05 11:42:29 -04:00
Julian Lam
6478532bf5 fix: ensure check returns false if no addresses are looked up, fix bug where cached value got changed accidentally 2025-06-05 11:28:47 -04:00
Barış Soner Uşaklı
677d6dd060 Merge branch 'master' into develop 2025-06-05 07:16:00 -04:00
Barış Uşaklı
4fbcfae8b1 Post queue write api (#13473)
* move post queue from socket.io to rest api

* move harmony post-queue to core

add canEdit, allow users to edit their queued posts

* fix: openapi spec

* lint: whitespace
2025-06-05 07:15:45 -04:00
Julian Lam
010113a9a0 fix: wrap cached returns for dns lookups in nextTick 2025-06-04 13:19:33 -04:00
Julian Lam
6411c19765 fix: #13459, unread indicators for remote categories 2025-06-02 11:58:54 -04:00
Julian Lam
a8e613e13a fix: further guard against DNS rebinding attack 2025-06-02 11:05:35 -04:00
Julian Lam
70c04f0cb2 fix: undefined check, allow plugins to append to allow list 2025-06-02 11:05:35 -04:00
Julian Lam
df36021628 fix: simplify dns to use .lookup instead of .resolve4 and .resolve6, automatically allow requests to own hostname 2025-06-02 11:05:35 -04:00
Julian Lam
9d3b8c3abc feat: add protection mechanism to request lib so that network requests to reserved IP ranges throw an error 2025-06-02 11:05:35 -04:00
Julian Lam
524a1e8bfe fix: return 200 for non-implemented activities instead of 501 2025-06-02 10:15:05 -04:00
Barış Soner Uşaklı
b1022566da fix: closes #13458, check if plugin is system
plugin before activate/deactive/install/uninstall
2025-06-02 09:55:20 -04:00
Julian Lam
fcb3bfbc35 fix: return 200 for non-implemented activities instead of 501 2025-06-01 12:40:42 -04:00
Julian Lam
3d88f70680 Merge branch 'master' into develop 2025-06-01 00:32:05 -04:00
Julian Lam
cc92702620 fix: add try..catch around topics.post in note assertion logic 2025-06-01 00:31:58 -04:00
Julian Lam
f34930f5e8 Merge branch 'master' into develop 2025-05-31 22:47:06 -04:00
Julian Lam
83a55f6adc fix: don't throw on unknown post on Undo(Like) 2025-05-31 22:46:47 -04:00
Julian Lam
4d44456ff9 Merge branch 'master' into develop 2025-05-30 16:49:24 -04:00
Julian Lam
629eec7b5b fix: add try..catch wrapper around Announce(Like) call to internal method so as to not return a 500 — just drop the Like activity 2025-05-30 16:49:15 -04:00
Barış Soner Uşaklı
ebb88c1277 feat: add action:post-queue.save
fires after a post is added to the post queue
2025-05-30 11:45:04 -04:00
Barış Soner Uşaklı
57a5de2682 refactor: use strings for cids 2025-05-30 11:15:02 -04:00
Barış Soner Uşaklı
28c021a01b fix: remove null categories 2025-05-30 11:11:45 -04:00
Barış Soner Uşaklı
8d16367ad4 Merge branch 'master' into develop 2025-05-30 11:02:56 -04:00
Barış Soner Uşaklı
390f642850 fix: browser title translation 2025-05-30 11:00:08 -04:00
Barış Soner Uşaklı
78de8c6da1 fix: allow guests to load topic tools if they have privilege to view them
display errors from topics.loadTopicTools
2025-05-30 09:22:06 -04:00
Julian Lam
a80edfa1f1 fix: patch ap .probe() so that it does not execute on requests for its own resources 2025-05-29 15:15:06 -04:00
Julian Lam
20abeade41 Merge branch 'master' into develop 2025-05-28 14:53:38 -04:00
Julian Lam
49b5268e52 fix: send actor in undo(follow) 2025-05-28 14:53:32 -04:00
Julian Lam
b20a6ed0d7 fix: missed handling zset on ap unfollow 2025-05-28 12:31:53 -04:00
Julian Lam
a888b868c7 fix: additional tests for remote privileges, enforcing privileges for remote edits and deletes 2025-05-26 14:49:48 -04:00
Barış Soner Uşaklı
e16420a4eb Merge branch 'master' into develop 2025-05-25 19:04:33 -04:00
Julian Lam
e70e990a1a feat: restrict access to ap.probe method to registered users, add rate limiting protection 2025-05-22 14:13:41 -04:00
Barış Uşaklı
385f4f12be replace connect-multiparty with Multer (#13439)
* post upload route

* more multer changes

keep name and type fields in file objects so we dont break all plugins using these

* remove log

* fix: thumbs delete

* test: add array check
2025-05-20 10:45:56 -04:00
Barış Soner Uşaklı
0a574d7240 fix: group edit url 2025-05-15 18:23:38 -04:00
Julian Lam
8f9f377121 fix: add attachments to getpostsummaries call in search, #13324 2025-05-15 16:57:05 -04:00
Julian Lam
a460a55064 fix: bring back auto-categorization if group and object are same-origin, handle Peertube putting channel names in attributedTo 2025-05-15 15:40:01 -04:00
Julian Lam
3674fa5783 feat: save width and height values into post attachment 2025-05-15 13:56:31 -04:00
Julian Lam
45a11d45fc fix: #13419, handle remote content with mediaType text/markdown 2025-05-15 12:01:45 -04:00
Barış Soner Uşaklı
6c3e2a8e22 refactor: create date once per digest.send 2025-05-15 09:42:55 -04:00
Barış Soner Uşaklı
3faae559a8 Merge branch 'master' of https://github.com/NodeBB/NodeBB 2025-05-15 09:38:49 -04:00
Barış Soner Uşaklı
3d96afb2d1 feat: use local date string for digest subject
closes #13420
2025-05-15 09:38:43 -04:00