Commit Graph

10547 Commits

Author SHA1 Message Date
Barış Soner Uşaklı
6a63c1a100 fix: escape system message, don't allow editing system messages 2020-01-19 22:20:43 -05:00
Barış Soner Uşaklı
8c6a7954cf fix: delete upload 2020-01-19 14:57:06 -05:00
Barış Soner Uşaklı
153b1a0eaa fix: check uploadName 2020-01-19 11:56:13 -05:00
Barış Soner Uşaklı
01d1ae78c8 fix: #8120, bubble errors from static hooks 2020-01-17 13:30:57 -05:00
Barış Soner Uşaklı
b0f3e48ac2 fix: escape bootswatchSkin and homepageRoute 2020-01-17 11:48:00 -05:00
Barış Soner Uşaklı
3e52557689 fix: change owner missing await 2020-01-17 11:16:23 -05:00
Barış Soner Uşaklı
e3952674ba fix: hsts always enabled 2020-01-15 19:32:14 -05:00
Barış Soner Uşaklı
b7a57996f7 fix: escape topic.thumb 2020-01-15 18:53:08 -05:00
Baris Usakli
842916ea42 Merge branch 'master' of https://github.com/NodeBB/NodeBB 2020-01-15 11:36:39 -05:00
Baris Usakli
4eb9652a2a fix: #8112, don't crash hook returns no data 2020-01-15 11:36:27 -05:00
Opliko
740de034fa #8115 - log post owner changes (#8117)
* log post owner changes

* log each post separately

* use map instad of a loop
2020-01-15 11:05:57 -05:00
Opliko
879acc85ae Add disable/enable category to category edit page (#8118) 2020-01-14 17:30:56 -05:00
Barış Soner Uşaklı
e06c1bfcd2 fix: escape config.userLang/acpLang, don't allow invalid language codes 2020-01-13 12:27:50 -05:00
Barış Soner Uşaklı
61da8c29ac fix: group create/join/update name validation 2020-01-07 15:40:54 -05:00
Barış Soner Uşaklı
48f086279c fix: don't crash if groupData is missing 2020-01-07 10:39:35 -05:00
Barış Soner Uşaklı
5a8217de01 fix: #8105, fix export json on page load 2020-01-04 10:34:20 -05:00
arite
527745310d fix: #8103, fix advanced menu not displaying in ACP 2020-01-04 00:27:20 -05:00
Barış Soner Uşaklı
10989cccaa fix: meta description missing if url doesn't have post index 2019-12-30 22:19:00 -05:00
Barış Soner Uşaklı
9d074731f4 fix: login with weak password 2019-12-26 20:17:54 -05:00
Barış Soner Uşaklı
f6d7a24a67 fix: dont check password strength on login 2019-12-24 09:07:17 -05:00
Barış Soner Uşaklı
dec157d606 fix: #8085, fix cookie name 2019-12-17 08:10:21 -05:00
Barış Soner Uşaklı
a227cbe328 refactor: async/await middleware 2019-12-16 08:44:55 -05:00
Barış Soner Uşaklı
1b992d8201 fix: #8058, fix incorrect digest setting display in ACP 2019-12-11 10:25:16 -05:00
Peter Jaszkowiak
8c314fe461 Support allowing classes
Otherwise `<input class="form-control">` can't work
2019-12-08 12:35:08 -05:00
Baris Usakli
3454a24b3c refactor: change to const/let 2019-12-05 17:52:50 -05:00
Baris Usakli
a8df6d6298 fix: #8078, dont mark notifications read without a mergeId 2019-12-05 15:44:22 -05:00
Baris Usakli
7af1c873a3 fix: #8077, show continue chat on all profile pages 2019-12-05 14:56:01 -05:00
Julian Lam
4fc6944377 feat: better output for cli plugins list, closes #8075 2019-12-04 16:07:47 -05:00
Barış Soner Uşaklı
2679f37dec fix: profile showing posts from deleted topics 2019-12-04 11:37:35 -05:00
Barış Soner Uşaklı
05c9fe2735 feat: #5272, allow changing user groups from manage users page 2019-12-04 11:14:01 -05:00
Baris Usakli
4d66978338 fix: #8073, configurable necroThreshold 2019-12-03 12:11:39 -05:00
Baris Usakli
b323df2fe0 fix: allow members to search as well 2019-12-03 11:17:11 -05:00
Baris Usakli
c2cd7de891 fix: #8069, dont show hidden groups in search 2019-11-29 13:35:50 -05:00
Baris Usakli
33fd4a1c2b fix: missing await 2019-11-29 11:35:00 -05:00
Julian Lam
f9a8ebfce9 feat: merge social authentication into plugins menu in ACP
* also reordered the menu in ACP so plugins come first
* added muted headers in desktop version to distinguish both lists
* fixes julianlam/nodebb-plugin-sso-google#21
* closes #8066
2019-11-26 11:30:49 -05:00
Barış Soner Uşaklı
1bda92e3fc fix: #8064, break-word on post-queue 2019-11-25 14:22:35 -05:00
Barış Soner Uşaklı
de404102c0 fix: #8061, don't crash if there is a network problem 2019-11-24 09:41:03 -05:00
Barış Soner Uşaklı
a688aaae51 fix: #8059, properly mark topic unread when using mark unread for all 2019-11-23 08:52:18 -05:00
Julian Lam
510737726c fix: unhandled promise rejection error on reset error
Also, removed buildAll() on reset.
2019-11-20 13:45:29 -05:00
Baris Usakli
366ad5cd69 fix: #8050, fix redirect after registration 2019-11-19 12:02:14 -05:00
Opliko
0efe27b1f2 fix: make _csrf a secure cookie if the website is using https (#8045)
* Make _csrf a secure cookie if the website is using https

* fix style for TravsCI

* Add `url_parsed` to databasemock
2019-11-18 13:07:05 -05:00
Baris Usakli
0a96c92300 fix: #8034 2019-11-15 15:27:02 -05:00
Baris Usakli
cec0079573 refactor: shorter returns 2019-11-15 14:27:45 -05:00
Baris Usakli
efd1e88bbf feat: convert middleware.isAdmin to async/await 2019-11-15 14:24:24 -05:00
Baris Usakli
a254520485 fix: serialize 2019-11-15 14:09:10 -05:00
Baris Usakli
1eca5b3dae fix: show login fields if user has local password 2019-11-15 13:19:29 -05:00
Ben Lubar
f65922297d fix abysmal postgresql performance in getSortedSetsMembers (#8030)
* refactor postgres upgrade function to use async

* add function wrapper for getting the elements of a sorted set to avoid postgres planning the query with a nested sequential scan

* fix fatal(?!) lint errors

* add missing await

* bump PostgreSQL version on Travis CI to one that isn't over 3 years out of date
2019-11-13 14:45:48 -05:00
Barış Soner Uşaklı
eabc6f4763 fix: crash if post doesn't have topic data 2019-11-08 18:38:58 -05:00
Barış Soner Uşaklı
e52ecfaf3f fix: don't touch objects that don't have the required fields 2019-11-08 18:34:57 -05:00
Barış Soner Uşaklı
f4381ba366 fix: add missing await to sendValidationEmail 2019-11-07 18:10:30 -05:00