Commit Graph

871 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
48b41debe6 fix: vulnerability in cover and admin uploads (#8419)
* fix: vulnerability in cover and admin uploads

* fix: remove old test

* fix: update tests
2020-06-22 12:08:35 -04:00
Barış Soner Uşaklı
e80379dc0e feat: display stack trace on winston.error 2020-06-20 23:32:12 -04:00
Barış Soner Uşaklı
79a7f89235 Merge branch 'master' of https://github.com/NodeBB/NodeBB 2020-06-18 23:24:40 -04:00
Barış Soner Uşaklı
2bcf7f72d2 fix: follower count going out of sync with real follower count 2020-06-18 23:24:03 -04:00
Barış Soner Uşaklı
bef37e27cb fix: test lock for user create (#8415)
* fix: test lock for user create

* fix: redis hdel with undefined

* feat: add test for undefined key in deleteObjectFields
2020-06-18 23:16:48 -04:00
Barış Soner Uşaklı
f0526bff9f fix: add mising timestamp 2020-06-18 15:41:58 -04:00
Barış Soner Uşaklı
a680a95e73 feat: add filter:user.getFields to match topic/posts 2020-06-17 11:46:42 -04:00
Barış Soner Uşaklı
18d892398f fix: add timestamp to initial username history 2020-06-13 13:55:48 -04:00
Julian Lam
67aca822e6 feat: account content deletion, closes #8381 2020-06-08 08:43:31 -04:00
Barış Soner Uşaklı
5a2b515431 feat: #8349, remove user posts from queue if user is deleted 2020-06-01 22:29:56 -04:00
Barış Soner Uşaklı
8bf980cb63 fix: tests, handle no sessions 2020-05-16 22:17:20 -04:00
Barış Soner Uşaklı
a0d76ff0a6 fix: #8318, clean expired sessions on login and get 2020-05-16 20:20:47 -04:00
Barış Soner Uşaklı
1d3fa3bc4e feat: throw error if uid is missing for update 2020-05-15 15:23:01 -04:00
Opliko
c4545381d7 feat: Add hooks for user blocks (#8296)
* Add hooks for user blocks

* change naming

* Fix the filter...

fixes #8109
2020-05-08 14:42:02 -04:00
Barış Soner Uşaklı
5ebcdb1806 fix: #8287, fix users:flags as well 2020-05-02 15:34:58 -04:00
Barış Soner Uşaklı
9d153fd388 fix: #8287, dont readd user after deletion
don't add user uid back to users:* sorted sets if they are deleted
upgrade script to fix users:* sorted sets
2020-05-02 13:27:16 -04:00
Barış Soner Uşaklı
0ca84bd9f4 fix: #8284, parse ToS on register
rewrite intersitials to async/await
2020-04-30 15:13:14 -04:00
Julian Lam
ccc6118d30 Testing suite integration for openapi spec (#8263)
* feat: testing suite integration for openapi spec

The testing suite now takes the openapi spec into account. It will
check each route defined, make a call to it, and compare the
response with the defined schema. Any mismatches will cause the
test to fail.

* fix(openapi): removed debug stuff from tests

* fix(openapi): fixed some tests

* fix(openapi): added additional check to tests, test fixes

* fix(openapi): better tests, fixed spec errors

* fix(openapi): bad conditional in test

* fix: oops

* fix(openapi): more tests fixing

* fix(openapi): more tests

* fix(openapi): fix some more tests

* fix: verbose'd an info log

* fix: topic pagination route returns schema-optimized pagination block

* fix(openapi): more test/spec fixes

* fix(openapi): accidentally sending in authenticated jar for anon routes

* fix(openapi): more test/spec fixes

* fix(openapi): more spec fixes

* fix: timestampReadable Invalid Date

* fix(openapi): more tests... almost there

* fix(openapi): more tests fixing

* fix(openapi): finally all tests passing

* fix(openapi): added reverse test to compare response to spec

... and fixed all the tests that broke

* fix: remove tests related to group covers, as route is gone

* fix(openapi): broken test on travis

* fix(openapi): broken test on travis

* fix(openapi): broken test on travis

* fix(openapi): object cache is not present for psql

* fix: tests

Co-authored-by: Barış Soner Uşaklı <barisusakli@gmail.com>
2020-04-23 21:50:08 -04:00
Barış Soner Uşaklı
8e23dec84b fix: lint 2020-04-01 21:57:28 -04:00
Barış Soner Uşaklı
00e299e93e feat: closes #8229, add targetUid to action:password.change 2020-04-01 00:11:55 -04:00
Barış Soner Uşaklı
f07f4f8e1a fix: #8202, filter non-existing users in search by uid 2020-03-11 12:19:20 -04:00
psychobunny
266061c31a fix: notification bodyShort truncated if there is a comma in topic title 2020-03-10 11:26:08 -04:00
Julian Lam
1efb238a9a refactor: getUsersCSV to use batch lib 2020-03-05 17:51:34 -05:00
Barış Soner Uşaklı
14e7866745 fix: #8179, limit length of location/website/fullname, check grouptitle 2020-02-24 16:58:51 -05:00
Julian Lam
667608a02c fix: #8168 re-allowing slashes in homePageRoute
Resolves regression introduced by b0f3e48ac2
2020-02-19 12:24:41 -05:00
Barış Soner Uşaklı
3cca929a88 fix: add missing await 2020-01-26 21:35:04 -05:00
Barış Soner Uşaklı
8c6a7954cf fix: delete upload 2020-01-19 14:57:06 -05:00
Barış Soner Uşaklı
153b1a0eaa fix: check uploadName 2020-01-19 11:56:13 -05:00
Barış Soner Uşaklı
b0f3e48ac2 fix: escape bootswatchSkin and homepageRoute 2020-01-17 11:48:00 -05:00
Barış Soner Uşaklı
e06c1bfcd2 fix: escape config.userLang/acpLang, don't allow invalid language codes 2020-01-13 12:27:50 -05:00
Barış Soner Uşaklı
9d074731f4 fix: login with weak password 2019-12-26 20:17:54 -05:00
Barış Soner Uşaklı
f6d7a24a67 fix: dont check password strength on login 2019-12-24 09:07:17 -05:00
Barış Soner Uşaklı
1b992d8201 fix: #8058, fix incorrect digest setting display in ACP 2019-12-11 10:25:16 -05:00
Barış Soner Uşaklı
f4381ba366 fix: add missing await to sendValidationEmail 2019-11-07 18:10:30 -05:00
Julian Lam
645d647248 feat: wip, better digest handling (+ eventual digest resend logic) (#7995)
* feat: wip, better digest handling (+ eventual digest resend logic)

- await emailer.send call in digest.send method
- save send success to a new sorted set digest:{interval}:byUid

* feat: continuing work on digest tools

- Added ACP page to view digest settings and delivery times per user

* feat: added paginator and stub buttons for resending digest

* feat: wrapping up digest revamp

- New language strings in ACP digest page
- Client-side ACP script for digest ACP page
- Websocket call for ACP page to execute digests
- Broke out logic to retrieve user digest settings to getUsersInterval

* fix: minor cleanup

* fix: #8010 and some style suggestions from baris

* fix: resolve confusing comment
2019-11-02 13:11:02 -04:00
Barış Soner Uşaklı
0037a03886 fix: #8018, allow absolute urls in notification.path 2019-11-01 21:01:46 -04:00
Barış Soner Uşaklı
59242d31aa fix: #8010, fix isBanned call 2019-10-31 16:31:49 -04:00
Baris Usakli
485fbd2f14 feat: #7964, change all categories at once
allow passing cids to setCategoryWatchState and category.exists
2019-10-11 15:25:41 -04:00
Barış Soner Uşaklı
75bcb0f484 fix: remove unused data from post/topic/user hashes 2019-10-07 23:13:43 -04:00
Barış Soner Uşaklı
f8c8038a06 refactor: remove log, topics.exists 2019-10-04 19:19:01 -04:00
Barış Soner Uşaklı
dc8d721c46 refactor: async/await 2019-10-03 23:31:42 -04:00
Baris Usakli
d5dda26f97 fix: #7938, escape username in registration queue 2019-10-03 11:30:09 -04:00
Barış Soner Uşaklı
603908c10a refactor: async/await socket.io/index 2019-10-02 22:51:02 -04:00
Barış Soner Uşaklı
c5ffd8cc74 refactor: async/await image.js 2019-10-02 18:50:03 -04:00
Barış Soner Uşaklı
9a7560049a feat: bypass cropper for gifs 2019-09-29 21:03:37 -04:00
Barış Soner Uşaklı
625b0815bb refactor: shorter, new Date doesnt throw 2019-09-23 23:51:45 -04:00
Barış Soner Uşaklı
babb9d7c55 fix: #7913, dont allow urls in fullname/location, validate birthday 2019-09-23 23:50:04 -04:00
Barış Soner Uşaklı
96ab8d05aa fix: only allow png/jpg/bmp in cover/profile images 2019-09-21 23:10:49 -04:00
Barış Soner Uşaklı
5505628c8d refactor: change to const 2019-09-21 22:15:42 -04:00
Barış Soner Uşaklı
a7d2b8a1fe refactor: async/await socket.io 2019-09-15 02:14:51 -04:00