From e7e2a2f488f0de1f21f778fe569ccf925e52f055 Mon Sep 17 00:00:00 2001
From: Misty Release Bot <deploy@nodebb.org>
Date: Wed, 13 Dec 2023 15:42:45 +0000
Subject: [PATCH 1/3] chore: incrementing version number - v3.5.3

---
 install/package.json | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/install/package.json b/install/package.json
index 14de04da6f..3e63d4c083 100644
--- a/install/package.json
+++ b/install/package.json
@@ -2,7 +2,7 @@
     "name": "nodebb",
     "license": "GPL-3.0",
     "description": "NodeBB Forum",
-    "version": "3.5.2",
+    "version": "3.5.3",
     "homepage": "https://www.nodebb.org",
     "repository": {
         "type": "git",

From e49ddaf815483747639a1d19ea72e5df55bb2faa Mon Sep 17 00:00:00 2001
From: Misty Release Bot <deploy@nodebb.org>
Date: Wed, 13 Dec 2023 15:42:45 +0000
Subject: [PATCH 2/3] chore: update changelog for v3.5.3

---
 CHANGELOG.md | 46 ++++++++++++++++++++++++++++++++++++++++++++++
 1 file changed, 46 insertions(+)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 0a0993f03d..294dbd93ef 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,3 +1,49 @@
+#### v3.5.3 (2023-12-13)
+
+##### Chores
+
+*  up composer (245e5df3)
+*  up composer default (c1f82b78)
+*  incrementing version number - v3.5.2 (52fbb2da)
+*  update changelog for v3.5.2 (e2e85053)
+*  incrementing version number - v3.5.1 (4c543488)
+*  incrementing version number - v3.5.0 (d06fb4f0)
+*  incrementing version number - v3.4.3 (5c984250)
+*  incrementing version number - v3.4.2 (3f0dac38)
+*  incrementing version number - v3.4.1 (01e69574)
+*  incrementing version number - v3.4.0 (fd9247c5)
+*  incrementing version number - v3.3.9 (5805e770)
+*  incrementing version number - v3.3.8 (a5603565)
+*  incrementing version number - v3.3.7 (b26f1744)
+*  incrementing version number - v3.3.6 (7fb38792)
+*  incrementing version number - v3.3.4 (a67f84ea)
+*  incrementing version number - v3.3.3 (f94d239b)
+*  incrementing version number - v3.3.2 (ec9dac97)
+*  incrementing version number - v3.3.1 (151cc68f)
+*  incrementing version number - v3.3.0 (fc1ad70f)
+*  incrementing version number - v3.2.3 (b06d3e63)
+*  incrementing version number - v3.2.2 (758ecfcd)
+*  incrementing version number - v3.2.1 (20145074)
+*  incrementing version number - v3.2.0 (9ecac38e)
+*  incrementing version number - v3.1.7 (0b4e81ab)
+*  incrementing version number - v3.1.6 (b3a3b130)
+*  incrementing version number - v3.1.5 (ec19343a)
+*  incrementing version number - v3.1.4 (2452783c)
+*  incrementing version number - v3.1.3 (3b4e9d3f)
+*  incrementing version number - v3.1.2 (40fa3489)
+*  incrementing version number - v3.1.1 (40250733)
+*  incrementing version number - v3.1.0 (0cb386bd)
+*  incrementing version number - v3.0.1 (26f6ea49)
+*  incrementing version number - v3.0.0 (224e08cd)
+
+##### Bug Fixes
+
+*  change translator escape (c434262e)
+
+##### Other Changes
+
+*  add types for database abstration layer (#10762) (17cd19c7)
+
 #### v3.5.2 (2023-11-29)
 
 ##### Chores

From 2dc1def51f89d9fe2fd7b80d2c632a764aa7c9f2 Mon Sep 17 00:00:00 2001
From: =?UTF-8?q?Bar=C4=B1=C5=9F=20Soner=20U=C5=9Fakl=C4=B1?=
 <barisusakli@gmail.com>
Date: Wed, 13 Dec 2023 13:18:07 -0500
Subject: [PATCH 3/3] fix: #12227, fix crash in redirect

---
 src/middleware/header.js | 15 +--------------
 src/middleware/user.js   | 14 ++++++++++++++
 src/routes/helpers.js    |  1 +
 3 files changed, 16 insertions(+), 14 deletions(-)

diff --git a/src/middleware/header.js b/src/middleware/header.js
index b6c4e47ec0..383ef8e94e 100644
--- a/src/middleware/header.js
+++ b/src/middleware/header.js
@@ -1,6 +1,5 @@
 'use strict';
 
-const user = require('../user');
 const plugins = require('../plugins');
 const helpers = require('./helpers');
 
@@ -27,17 +26,5 @@ async function doBuildHeader(req, res) {
 	}
 
 	await plugins.hooks.fire('filter:middleware.buildHeader', { req: req, locals: res.locals });
-	const [config, canLoginIfBanned] = await Promise.all([
-		controllers.api.loadConfig(req),
-		user.bans.canLoginIfBanned(req.uid),
-	]);
-
-	if (!canLoginIfBanned && req.loggedIn) {
-		req.logout(() => {
-			res.redirect('/');
-		});
-		return;
-	}
-
-	res.locals.config = config;
+	res.locals.config = await controllers.api.loadConfig(req);
 }
diff --git a/src/middleware/user.js b/src/middleware/user.js
index 1220897ffc..a9573e397c 100644
--- a/src/middleware/user.js
+++ b/src/middleware/user.js
@@ -221,6 +221,20 @@ module.exports = function (middleware) {
 		controllers.helpers.redirect(res, path);
 	});
 
+	middleware.redirectToHomeIfBanned = helpers.try(async (req, res, next) => {
+		if (req.loggedIn) {
+			const canLoginIfBanned = await user.bans.canLoginIfBanned(req.uid);
+			if (!canLoginIfBanned) {
+				req.logout(() => {
+					res.redirect('/');
+				});
+				return;
+			}
+		}
+
+		next();
+	});
+
 	middleware.requireUser = function (req, res, next) {
 		if (req.loggedIn) {
 			return next();
diff --git a/src/routes/helpers.js b/src/routes/helpers.js
index aff46467ec..b43f53fd3e 100644
--- a/src/routes/helpers.js
+++ b/src/routes/helpers.js
@@ -18,6 +18,7 @@ helpers.setupPageRoute = function (...args) {
 	middlewares = [
 		middleware.applyBlacklist,
 		middleware.authenticateRequest,
+		middleware.redirectToHomeIfBanned,
 		middleware.maintenanceMode,
 		middleware.registrationComplete,
 		middleware.pluginHooks,