Skip to content

NodeBB v0.7.2

Moved NodeBB Development

Suggested Topics


  • NodeBB 2.8.1 Security Update

    Moved NodeBB Development
    4
    3 Votes
    4 Posts
    656 Views
    barisB
    It is basically the same vulnerability exploited with a different socket call. The initial fix in 2.6.1 only prevented a specific case, the fix in 2.8.1 should cover all cases. You can either upgrade to 2.8.1 or only get the changes from the specific commit.
  • Image upload plugin in nodebb 2.x

    NodeBB Development
    4
    0 Votes
    4 Posts
    498 Views
    oplik0O
    More specifically, the issue is that it defines a static directory in plugin.json: "staticDirs": { "s3": "public" }, But doesn't have it. It seems to be an artifact of people forking and updating it without fully understanding what exactly it was doing - looking back at some history at some point someone moved the templates from public/templates to just templates/ and apparently NodeBB wasn't enforcing that directories have to exist at that point, so it wasn't noticed and all future forks inherited this bug. NodeBB is IMO doing fine here - a lack of directory a plugin declared to have might suggest some issue with the installation or the plugin itself (for example a typo in a path). A plugin incorrectly declaring something it doesn't use can't really be distinguished from these issues. Also, @julian while .gitignore works, I feel like it's a bit of abuse of that feature and the name is misleading (upon seeing a directory with .gitignore my first thought would be that something is supposed to go there but will be ignored. And I feel without knowing much about git I might've assumed it meant the whole directory would be ignored by git - the opposite of what it actually does). I personally prefer the convention of using an empty file named .gitkeep (or just .keep), since it more obviously refers to keeping the directory and wouldn't have any other potential impact on files included by git. EDIT: TL;DR of the issue: [image: 1663029091446-why-would-nodebb-do-this.png]
  • NodeBB v1.13.2 released!

    Moved NodeBB Development
    14
    6 Votes
    14 Posts
    2k Views
    crazycellsC
    Is there a specific reason that letters on the default avatars got smaller in this version (1.13) compared to previous ones?
  • NodeBB v1.8.2 released!

    Moved NodeBB Development
    1
    5 Votes
    1 Posts
    2k Views
    E
    Hi folks, This is just a minor release. For the issues solved, please check our GitHub page. Cheers.
  • NodeBB v0.7.0-dev

    NodeBB Development
    3
    0 Votes
    3 Posts
    1k Views
    ?
    @julian said: Right now, it's on the master branch of our GitHub repository Yes! Thanks

Looks like your connection to NodeBB Community was lost, please wait while we try to reconnect.