@baris Guess that should have been the obvious, and yeah, we had some code that would auto generate a background for users. Disabling that did fix it. I really appreciate the help, feel kind of stupid now lol. Besides that being fixed now we still have an ongoing issue with plugins not working like emoji's, shoutbox, and so on. And words of advice on that?
Hey guys. The first thing I usually check with node apps is whether or not the frame options are set. I don't understand why Express doesn't make this a default.
At least for signed in users this should definitely be the case, because stealing someones info is a piece of cake this way.
Other than that, thanks for making this software. If you guys keep it up, I'm sure this can have a bit of an impact on the node eco-system!