Thomas Lynch
565f52478b
WIP Yandex SmartCaptcha support, need somebody to give me a sitekey+secretkey to test, unavailable in my country
1 year ago
Thomas Lynch
7a9386102f
Board default language migration and globalmanage setting addition
1 year ago
Thomas Lynch
f3f972a4a4
Move referercheck earlier so it doesnt break since i18n, and add a form validation to prevent referer check getting into an invalid state with empty hosts
1 year ago
Thomas Lynch
9ebdaada35
add missing permissions import
1 year ago
Thomas Lynch
aa04faa25e
make global anonymizer file blocking apply to uploading board asset, banners, flags, adjust it for posting
1 year ago
Thomas Lynch
89ee952eb6
Move middleware to properly fix bypass success screen language, and update some code in gulp/res/js/forms.js to handle translated responses for e.g. missing captcha
1 year ago
Thomas Lynch
0b99e89522
Testing bypass success screen bugfix
1 year ago
Thomas Lynch
571b481a8c
add option to limit video/image sizes
1 year ago
Thomas Lynch
8476c260b9
Add translation function and strings for just about every message in the controllers
1 year ago
Thomas Lynch
8f9ecb9de2
Fix mac instead of total for asset/banner/flag count checking in controllers
1 year ago
Thomas Lynch
48bf19a3d3
Translate a bunch more actionhandlers and form models, and imrpove error translations in server.js ref #396
1 year ago
Thomas Lynch
3f3e63f9c1
Add some i18n function calls to controllers for add*, update the models and make controllers destructure res.locals for less repetition of res.locals, and add more machine russian translation
1 year ago
Thomas Lynch
dc27f9216c
moderators -> staff, and some old removals
1 year ago
Thomas Lynch
ef4de0fb07
editAccount no longer allows account editors to apply roles to users with root permission
1 year ago
Thomas Lynch
f0b1ce6f63
eslint fix
1 year ago
Thomas Lynch
cebf2fe4a9
Convert uploadbanners to new schema checker along with other asset handlers, and fix max flag assets check
1 year ago
Thomas Lynch
a4927c86a1
Convert addflags and addassets to schema formhandler, was still on old form handling code
1 year ago
Thomas Lynch
612e7d0f3a
Add language set middleware to a bunch of routes, and make some minor middleware ordering changes to supprot
...
Add example translations in server.js, a controller for form submission, and in a middleware (file middleware in this case)
1 year ago
Thomas Lynch
7c9f6257f8
Add setQueryLanguage mw, Make bypass_minimal language aware, TODO make form submissions know language and redirect to blockbypass for board with language query string
1 year ago
Thomas Lynch
5e3b935664
fix language setting and test translation on globalmanagenav
1 year ago
Thomas Lynch
4c3ba53cc1
Set language global and after boards.exists
1 year ago
Thomas Lynch
e4dd53427e
Add language setting to global settings and board settings
1 year ago
Thomas Lynch
679d095d98
Start on localisation ref #396
1 year ago
Thomas Lynch
5a7368a0a4
Add a new property to permissions metadata and reflect on frontend inability for users without that "parent" permission to edit roles/accounts to have some permissions e.g. root, edit roles, edit accs
...
Put the metadata into permissions.js (also TODO: key the metadata by bits instead? i.e [Permisions.whatever]: {})
2 years ago
Thomas Lynch
d639460bb3
Bugfix editing from actions form redirecting always to OP instead of post
2 years ago
88b5542908
fix post reporting for not logged-in users
...
That check is only relevant when we try to move a post.
2 years ago
Thomas Lynch
bc53bc1e4a
Allow roles from globalmanage to be fetched as json
2 years ago
Thomas Lynch
a1ccd6f267
Try to integrate post moving a bit better into the existing combined actions flow
...
Bugfix some move issues
2 years ago
Thomas Lynch
b391c0cb66
Make post editing a GET endpoint with perm check like editstaff/editcustompages, much more sensible
2 years ago
Thomas Lynch
1191ec4dc8
Mostly functional cross board post moving
2 years ago
Thomas Lynch
0d6323669f
Start on cross board thread moves #250
2 years ago
Thomas Lynch
29bb4856ab
2fa improvements
...
- Don't allow code re-use, successfully used codes will be invalid on repeated use for the window time
- Don't attach the full twofactor secret to user object in session for security. Only store a boolean if it's enabled for rendering, checks, etc. The full account should be fetched first before doTwoFactor()
- Better names for some keys of twofactor redis stuff
2 years ago
Thomas Lynch
e6346f9f53
Add twofactor input validation in changepassword controller
2 years ago
Thomas Lynch
4d86406483
Initial commit of 2FA for accounts, TOTP-based
2 years ago
Thomas Lynch
6db781e8b8
Limit ban note length to global limits log_message length
2 years ago
Thomas Lynch
b69337e2f1
Show ban notes in mod view tables and allow editing them
2 years ago
Thomas Lynch
0fc87e752d
make captcha font apply to text AND grid
...
set a new default font which is common on linux, in debian repos, and has the chess characters
remove 24MB font file that came from i dont even remember where
2 years ago
Thomas Lynch
cf92d77a2f
Allow tegaki only, show as attachment with replay. perhaps an option in future to disable this (why not just use spoiler?)
...
Revert condition for potentially confusing backend message, no longer needed because of above
Set color palette when opening replays to match what is set by default when drawing, to prevent weird looking color palette
Tegaki CSS fix
2 years ago
Thomas Lynch
8e5c8b5ab0
Tegaki replaying overhaul
2 years ago
Thomas Lynch
2a48b10054
Fix duplicate key in projectedsettings for board settings, and make custompages jsons get removed on deleting custom page.
...
Close #479 add endpoints for board and global settings.json to api with options that would be useful for a 3rd party app. Add the associated tasks, calls to them in settings.
Small change and add comments in lib/build/render.
2 years ago
Thomas Lynch
641c087ecc
Add public json for modlog list, logs, custompages
...
update the banners task to output json (not just render it), so it can be reached on first pageload
close #491
2 years ago
Thomas Lynch
3cb5e0197a
Revert "Close #480 dont show "register" on login page if not allowed for regular user, since users might reach it clicking "manage" after the login redirect"
...
This reverts commit 9c5dd5efa8
2 years ago
Thomas Lynch
9c5dd5efa8
Close #480 dont show "register" on login page if not allowed for regular user, since users might reach it clicking "manage" after the login redirect
2 years ago
Thomas Lynch
47ab8d22c0
Configurable hot threads max age, update migration, changelog, etc
2 years ago
Thomas Lynch
216968b053
Add middlewares to fetch account on individual blockbypass form to allow bypass permission to work (no isLoggedIn needed)
2 years ago
Thomas Lynch
47083e149b
Fix the anonymizer bypass captcha permission issue (and fix the stupid pre-bypass and postsEarly in general)
2 years ago
Thomas Lynch
3a4737ad8e
Add account permission to bypass captcha ref #435 still TODO fixing it for anonymizers
2 years ago
Thomas Lynch
962481845d
Bugfix double sending headers on return from create model, e.g. if board already exists
2 years ago
Thomas Lynch
c969814f54
First version of grid v2
2 years ago
Thomas Lynch
8f74885ba2
Add noise and paint slider options to grid captcha
2 years ago
some random guy