Anime Lovers

Could be related to https://github.com/NodeBB/NodeBB/issues/7872

julianlam created this issue in NodeBB/NodeBB

closed Basic XSS protection/HTML sanitization for all parsed content #7872

Getting user join chat we are receiving a msg in chat room

@PitaJ ok
Thank you for new release and quick reply
old plugins conflict the nodebb 1.13.0 we uninstalled and working now!

after upgrade new/old links of topic not working..
Please help @Global-Moderators

Thanks a lot for your support! HTML sanitizer is a good feature for me. It allows various built in HTML snippets to be available whereas does not expose users security issue. I'll give a try.

Looks OK to me did you put a console.log here to see if the groups and privileges are correct? Did you check the database directly to see if the change happened?

Hi @sazulo,

Since your plugin hook function is async you should not use the callback and just return strategies from the function.

Change your function to the below and it should work.

OpenIDConnectPlugin.getStrategy = async function (strategies) {
	try {
		if (!OpenIDConnectPlugin.config.enabled) {
			return strategies;
		}
		OpenIDConnectPlugin.issuer = await Issuer.discover(OpenIDConnectPlugin.config.discoverUrl);

		const strategy = new Strategy({
			client: new OpenIDConnectPlugin.issuer.Client({
				client_id: OpenIDConnectPlugin.config.clientId,
				client_secret: OpenIDConnectPlugin.config.clientSecret,
				redirect_uris: [nconf.get('url') + AUTH_OIDC_CALLBACK_PATH],
			}),
			params: {
				// In OpenID Connect,
				// => issuer and subject in the 'openid' scope
				// => email in the 'email' scope
				// => username in the 'profile' scope ( as 'preferred_username' )
				scope: 'openid email profile',
				get nonce() {
					return uuid.v4();
				},
			},
		}, OpenIDConnectPlugin.verify);

		passport.use(strategy);

		strategies.push({
			name: strategy.name,
			url: AUTH_OIDC_LOGIN_PATH,
			callbackUrl: AUTH_OIDC_CALLBACK_PATH,
			icon: 'fa-openid',
			scope: 'user:username',
		});

		return strategies;
	} catch (err) {
		console.log(err);
		winston.error(err);
		throw err;
	}
};

Sound like you need to rebuild and clear your browser cache then.

There are no errors in the messages tab, you should keep it open and reproduce the error. It should show which message caused a invalid-event error.

Breaking change to themes https://github.com/NodeBB/NodeBB/issues/8018

This only affects custom themes on forums that are running on a subfolder. To upgrade the theme to 1.13.0 just remove {config.relative_path} from the files in this commit. https://github.com/NodeBB/nodebb-theme-persona/commit/eb33ae7fa1d59aa1fce77cea988a537e277049b5

djensen47 created this issue in NodeBB/NodeBB

closed Welcome notification link broken #8018

0 barisusakli committed to NodeBB/nodebb-theme-persona

https://github.com/NodeBB/NodeBB/issues/8018