24693 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
624738359a chore: up version v2.8.20 2025-06-16 12:59:05 -04:00
Barış Soner Uşaklı
15c3abb6d5 fix: add sanitizesvg 2025-06-16 12:58:51 -04:00
Barış Soner Uşaklı
7ead74fe9b fix: sanitize svg when uploading site-logo, default avatar and og:image 2025-06-16 12:57:30 -04:00
Barış Soner Uşaklı
cbbdc79357 chore: up version v2.8.19 2025-06-09 11:21:26 -04:00
Barış Soner Uşaklı
e0d5f92b2a fix: escape, query params 2025-06-09 11:19:45 -04:00
Barış Soner Uşaklı
8228eeb468 chore: up version v2.8.18 2025-05-12 11:07:15 -04:00
Barış Soner Uşaklı
fc09f6c4f9 fix: escape flag filters 2025-05-12 11:00:38 -04:00
Barış Soner Uşaklı
7a26672872 fix: sql injection in sortedSetScan 2025-05-12 10:59:53 -04:00
Barış Soner Uşaklı
de820ae198 chore: up persona 2024-06-24 16:04:26 -04:00
Barış Soner Uşaklı
961a193787 chore: up persona 2024-06-24 16:02:28 -04:00
Barış Soner Uşaklı
4ab31e3f79 chore: openapi 2024-06-24 15:54:42 -04:00
Barış Soner Uşaklı
338f89deb5 backport author, and structured data fix to 2.x 2024-06-24 15:53:42 -04:00
Barış Soner Uşaklı
dc14d6a8d1 chore: up version v2.8.17 2023-08-22 12:49:06 -04:00
Barış Soner Uşaklı
fb43f9ae10 chore: update composer-default 2023-08-22 12:07:02 -04:00
Barış Soner Uşaklı
638e098f30 fix: #11756, fix unique visitor stats in acp table v2.8.16 2023-06-26 09:56:58 -04:00
Julian Lam
2514aace4e chore: bump nodebb version v2.8.15 2023-06-13 14:54:56 -04:00
Julian Lam
9ec7ab4afc fix: improper neutralization of user input in image wrapping code
(Backport of: 1d1639d46f)
2023-06-13 14:53:27 -04:00
Barış Soner Uşaklı
dd5ed9e507 fix: closes #11617, upgrade csrf-sync dep
adds back req.csrfToken()
v2.8.14
2023-05-20 21:05:02 -04:00
Barış Soner Uşaklı
8bc8cf1ba0 lint v2.8.13 2023-05-15 12:15:48 -04:00
Barış Soner Uşaklı
62e162cf1e fix: backport ws token fix 2023-05-15 11:55:18 -04:00
psibean
a5d92da9dd Replace csurf with csrf-sync 2023-05-15 11:48:25 -04:00
Julian Lam
2bd6eea2fa fix: #11554, email requirement bypass by sending in whitespace 2023-05-02 12:01:28 -04:00
Misty Release Bot
42b9fbc91c chore: incrementing version number - v2.8.12
(cherry picked from commit 3e494a1ea0)
Signed-off-by: Misty Release Bot <deploy@nodebb.org>
2023-04-26 14:34:45 +00:00
Misty Release Bot
5c0bf7ccbe Merge commit '30b6bcfca117e667c262c0462fc5f0100e6a436c' into v2.x 2023-04-26 14:34:42 +00:00
Barış Soner Uşaklı
30b6bcfca1 fix: #11519, clear parent cache all the way to root 2023-04-26 10:13:27 -04:00
Barış Soner Uşaklı
de2669a2c6 fix: only remove deleted tag, closes #11515 2023-04-24 15:39:00 -04:00
Barış Soner Uşaklı
21fb8590e5 test: remove old comment 2023-04-23 18:59:18 -04:00
Veronikya
c931183287 fix: NodeBB#11482 thumbs Post Can not upload a thumbnail, only multip… (#11483)
* fix: NodeBB#11482 thumbs Post Can not upload a thumbnail, only multiple uploads

* Modify upload thumbnail test

* Modify upload thumbnail test +,

* Get rid of v2 uploads test

* edit times

* Modify amount of files associated post test

* edit post file amount
2023-04-15 17:56:36 -04:00
Brutus5000
ae5afdbc66 feat: name theme on error:theme-not-set-in-configuration 2023-04-11 13:42:21 -04:00
Julian Lam
5343d2a01b chore: removing superfluous changelog items 2023-04-10 21:51:12 -04:00
Misty Release Bot
2ec81eff43 chore: incrementing version number - v2.8.11
(cherry picked from commit 82f0efb14b)
Signed-off-by: Misty Release Bot <deploy@nodebb.org>
2023-04-11 01:49:11 +00:00
Misty Release Bot
f2ca93f6c6 chore: update changelog for v2.8.11 2023-04-11 01:49:11 +00:00
Misty Release Bot
82f0efb14b chore: incrementing version number - v2.8.11 v2.8.11 2023-04-11 01:49:11 +00:00
Misty Release Bot
df08b47163 Merge commit 'c27567289f9937abd4abe6960a9b6e387cf68331' into v2.x 2023-04-11 01:49:09 +00:00
Opliko
c27567289f ci: publish to ghcr instead of docker hub 2023-04-05 14:38:47 -04:00
Julian Lam
c33730530e Revert "docs: update readme with new screenshot and updated copy for Harmony"
This reverts commit 67055006df.
2023-03-29 10:32:05 -04:00
Julian Lam
67055006df docs: update readme with new screenshot and updated copy for Harmony 2023-03-29 10:31:39 -04:00
Barış Soner Uşaklı
e0b2065802 test: update socket.io test 2023-03-28 08:15:42 -04:00
Barış Soner Uşaklı
4d2d76897a fix: don't crash on objects with toString property 2023-03-28 08:08:59 -04:00
Barış Soner Uşaklı
7397873db3 fix: fire action:user.online on user login 2023-03-27 22:16:41 -04:00
Misty Release Bot
5b7c3671c8 chore: incrementing version number - v2.8.10
(cherry picked from commit 48c1c7594d)
Signed-off-by: Misty Release Bot <deploy@nodebb.org>
2023-03-27 18:10:57 +00:00
Misty Release Bot
188ec62f9a chore: update changelog for v2.8.10 2023-03-27 18:10:57 +00:00
Misty Release Bot
48c1c7594d chore: incrementing version number - v2.8.10 v2.8.10 2023-03-27 18:10:57 +00:00
Misty Release Bot
73ff25887c Merge commit '830f142b7aea2e597294a84d52c05aab3a3539ca' into v2.x 2023-03-27 15:12:54 +00:00
Julian Lam
830f142b7a fix: #11403, remove loader.js crash counter logic 2023-03-27 10:55:44 -04:00
Barış Soner Uşaklı
1aff9cad91 lint: fix arrow 2023-03-27 10:47:15 -04:00
Barış Soner Uşaklı
37b48b82a4 fix: don't crash if event name is not a string 2023-03-27 10:38:53 -04:00
Barış Soner Uşaklı
e9a8e19508 chore: up composer-default 2023-03-21 10:13:21 -04:00
Barış Soner Uşaklı
894f392bfc lint: whitespace 2023-03-20 11:17:05 -04:00
Barış Soner Uşaklı
c2961ad4cd fix: closes #11173, move cache clear code
if 2 deps were updated only one of them was cleared from require.cache. ie commander & lru-cache both has major version bump then only commander would be cleared from cache since it throws first
2023-03-20 11:05:48 -04:00