Gotchas for 0.3.0

NodeBB Development

Suggested Topics

  • 3 Votes
    1 Posts

    Hello all,

    We are notifying you today about a security vulnerability that was present in older versions of NodeBB. We were notified of these vulnerabilities on 25 May 2022, and have patched and released fixed versions of NodeBB, v2.0.1 and v1.19.8, three days later, on 28 May.

    The specifics of this vulnerability are available upon request, but they are considered critical and affect the security of any site running an affected version of NodeBB. Admins are urged to upgrade to these patched versions as soon as possible.

    Alternatively, the following changesets can be cherry-picked into your installation of NodeBB in lieu of a full upgrade:

    v2.x v1.19.x

    As always, the NodeBB team is available at your disposal to answer any questions or provide assistance in implementing these changesets.

    For more information on the security vulnerability, please visit the GitHub Security Advisory page for this disclosure
  • 2 Votes
    2 Posts
  • 0 Votes
    1 Posts

    I'm trying to integrate angular 1.3 with NodeBB as we need are looking for options to integrate it with our angular application with some customization. However, angular controller objects are not recognized in tpl files and I'm guessing that it's looking for those objects in respective js files instead of looking at angular scopes.
    I've included angular in header.tpl and tried to initialized ng-app on a div tag.

    How to achieve this?

    Code snippet -

    <head> <title>{browserTitle}</title> <!-- BEGIN metaTags -->{function.buildMetaTag}<!-- END metaTags --> <link rel="stylesheet" type="text/css" href="{relative_path}/assets/stylesheet.css?{config.cache-buster}" /> <!-- IF bootswatchCSS --><link id="bootswatchCSS" href="{bootswatchCSS}" rel="stylesheet" media="screen"><!-- ENDIF bootswatchCSS --> <!-- BEGIN linkTags -->{function.buildLinkTag}<!-- END linkTags --> <script src=""></script> <script> var RELATIVE_PATH = "{relative_path}"; var config = JSON.parse('{{configJSON}}'); var app = { template: "{}", user: JSON.parse('{{userJSON}}') }; var myApp = angular.module('spicyApp1', []); myApp.controller('SpicyController', ['$scope', function($scope) { $scope.spice = 'very'; $scope.chiliSpicy = function() { $scope.spice = 'chili'; }; $scope.jalapenoSpicy = function() { $scope.spice = 'jalapeΓ±o'; }; }]); </script> <script src="{relative_path}/assets/nodebb.min.js?{config.cache-buster}"></script> <!-- BEGIN scripts --> <script type="text/javascript" src="{scripts.src}"></script> <!-- END scripts --> <!-- IF useCustomJS --> {{customJS}} <!-- ENDIF useCustomJS --> <!-- IF useCustomCSS --> <style type="text/css">{{customCSS}}</style> <!-- ENDIF useCustomCSS --> </head> <body class="{bodyClass} skin-{config.bootswatchSkin}" ng-app="spicyApp1"> <div> <div ng-controller="SpicyController"> {{SpicyController}} </div> </div>
  • NodeJS 4.0 released

    NodeBB Development
    0 Votes
    17 Posts

    Just a cautionary note, don't try 4.x in prod yet...