Community

Any release date planned for 1.17.0?

Unsolved NodeBB Development

Suggested Topics

  • barisB

    NodeBB 2.8.1 Security Update

    Moved NodeBB Development
    3 Votes
    4 Posts
    286 Views
    barisB

    It is basically the same vulnerability exploited with a different socket call. The initial fix in 2.6.1 only prevented a specific case, the fix in 2.8.1 should cover all cases.
    You can either upgrade to 2.8.1 or only get the changes from the specific commit.

  • E

    NodeBB v1.18.5 released.

    Moved NodeBB Development
    5 Votes
    1 Posts
    824 Views
    E

    We have released NodeBB v1.18.5. This release contains important security fixes.

    Upgrading is strongly advised.

    Please check our GitHub for details.

    A special thank you goes out to SonarSource for their contributions to this release and their detailed findings! To read more on this, please check out their blog post.

  • E

    NodeBB 1.8.0 has been released!

    Moved NodeBB Development
    4 Votes
    11 Posts
    3662 Views
    Michael PfaffM

    @michael-pfaff said in NodeBB 1.8.0 has been released!:

    Having issues on mobile. The chat send button doesn't seem to be working.

    Nvm. For some reason it's working now.

  • barisB

    0.7.0 Breaking Changes

    NodeBB Development
    4 Votes
    13 Posts
    7121 Views
    psychobunnyP

    I want to escape by default, to prevent accidental XSS. If you intentionally want to allow scripts then you should use double curly brackets

    I think its something I would rather break today than worry about it in future

  • julianJ

    Plugin Developers!! Read this re: v0.6.0 Breaking changes

    NodeBB Development
    2 Votes
    17 Posts
    6570 Views
    julianJ

    I correctly assumed (and this has been validated through actual plugin upgrades) that the latest hash in npm points to the most recently published version, and not the highest version.

    That is, given your plugin nodebb-plugin-example

    If v1.0.0 is compatible with v0.5.4 If v1.1.0 is compatible only with v0.6.0 The latter is published first A user typing npm install nodebb-plugin-example will receive v1.0.0 of the plugin, irrespective of what NodeBB version he/she is running, even though v1.1.0 is technically newer

    Now, special note: The NodeBB Package Manager doesn't do this. When the ACP calls nbbpm to request a suggested package, we query npm for the plugin data, and sort the versions before checking compatibility, so this issue is moot.

Copyright © 2023 NodeBB | Contributors