Commit Graph

7895 Commits

Author SHA1 Message Date
Reto Brunner
75490f5b5b sqlite: change to single quotes
Apparently sqlite started validating this in certain versions.
Crashes on BSDs with:

SQLite version 3.50.4 2025-07-30 19:33:53
sqlite> SELECT msg, type, time, network, channel FROM messages WHERE type = "message";
Parse error: no such column: "message" - should this be a string literal in single-quotes?
  time, network, channel FROM messages WHERE type = "message";
                                      error here ---^
2026-02-10 20:28:04 +01:00
Max Leiter
b2e3112806 Merge pull request #5016 from SyntaxColoring/master
Fix spurious "insecure connection" warning by treating ::1 as localhost
2026-01-03 00:53:11 -08:00
Max Leiter
c247ae31ae Merge "server: Fix quoting in error message" from supertassu/fix-quotes
server: Fix quoting in error message
2026-01-02 19:58:51 -08:00
Max Marrone
9533ee46b2 Treat ipv6 ::1 as localhost. 2025-12-20 17:34:57 -05:00
Taavi Väänänen
be603c6bdc server: Fix quoting in error message
In the error message about an invalid plugin command, only quote the
command name and not the rest of the error message after the command
name.
2025-11-08 12:36:50 +02:00
Reto Brunner
32f0181433 Merge branch 'lockedSettings' 2025-09-21 20:28:47 +02:00
Reto Brunner
793d01c0f5 merge trim username field in sign in form 2025-09-19 06:08:57 +02:00
Reto Brunner
d7316a0691 Merge precise user config reloading
This has the problem that failing to get a modification trigger might
lead to corrupted state. The author tested it on their large instance
however and it seems to work very well.
So let's try if anyone hits any problems in the wild
2025-09-19 06:03:51 +02:00
Reto Brunner
e919e1ce79 Merge branch 'saslFix' 2025-09-19 06:01:07 +02:00
Reto Brunner
857a2bbd6a Merge branch 'chghost' 2025-09-19 06:00:24 +02:00
Jay2k1
892562902f fix broken manual channel ordering
This fixes a small regression from #4861 (specifically, commit 0067c30) that resulted in manually reordering channels not being received by the server and hence not saved or synced.
2025-09-18 20:31:02 +02:00
Kevin Cox
c20e9d2ef0 Precise user configuration reloading.
Previously when any user config file was changed all users would be reloaded. This could be very expensive on installations with thousands of users. Since this triggered when any file was changed it would trigger when any user connected which can be quite frequent.

As a side-effect this removes the debouncing. This means that user changes take effect instantly rather than after 1s.

Since there is no longer a 1s delay it is extra important that files are written safely. To this end the `thelounge add <user>` command was updated to write the user file atomically. (The update path already did this.)
2025-09-06 09:08:28 -04:00
Reto Brunner
fc135023a4 style chghost messages
chghost messages weren't styled properly, given that they are
similar to a nick change, re-use the corresponding icon and style.
2025-09-06 11:36:49 +02:00
Reto Brunner
b270f51022 Disable sasl if sasl isn't configured
irc-framework has a funny fallback where it uses nick + server pw
in the sasl handshake, if account is undefined in the options.
This becomes a problem, as the nick might not actually be the account
(happened for znc users), so we need to set it to an empty object to really
turn it off.
2025-07-28 11:06:25 +02:00
sfan5
59a333d982 Trim username in sign-in form 2025-04-09 18:42:21 +02:00
Reto Brunner
3f2697cca6 reverse locknetwork config selection
LockNetwork is documented as:
> When set to `true`, users will not be able to modify host, port and TLS
> settings and will be limited to the configured network.

Looking at the view, that also includes the name field (for some reason).

When leaveMessage was added to the defaults, the white list for the LockedConfigNetDefaults
wasn't adjusted.

Rather than playing whack a mole, disallow the documented fields + name and export the rest.

Fixes: https://github.com/thelounge/thelounge/issues/4956
2025-02-07 14:00:14 +01:00
Reto Brunner
f97c4df2a2 ignore invalid warning in ldap test
it complains that the call `ldap.parseDN(dn).toString();` yields
"[object Object]" but that's bogus... the typing is incorrect.

ldap.DN stringifies properly
2024-11-07 17:48:30 +01:00
Reto Brunner
23fff58fc3 update dependency ldapjs to v2.3.3 2024-11-07 17:10:36 +01:00
Reto Brunner
a966b711ac update dependency ua-parser-js to v1.0.39 2024-11-07 17:08:16 +01:00
Reto Brunner
89b1ca1e3f update dependency yarn to v1.22.22 2024-11-07 17:03:20 +01:00
Reto Brunner
f86a7f6377 Fix showing multiple certificate fingerprints 2024-11-07 16:55:38 +01:00
Reto Brunner
1760e8b339 client: suppress "***" in joins/parts/etc. for screen readers 2024-11-07 16:51:03 +01:00
renovate[bot]
793313db77 fix(deps): update dependency yarn to v1.22.22 2024-11-01 00:20:21 +00:00
renovate[bot]
61f8ce1ae6 fix(deps): update dependency ua-parser-js to v1.0.39 2024-11-01 00:20:09 +00:00
Kenneth G. Franqueiro
4ba16364cc client: Indicate active context menu item for screen readers 2024-10-16 16:18:45 -04:00
Sadie Powell
e44bed1758 Fix showing multiple certificate fingerprints on InspIRCd v4. 2024-10-14 18:04:14 +01:00
Kenneth G. Franqueiro
59e8b16990 client: suppress "***" in joins/parts/etc. for screen readers 2024-10-10 17:20:21 -04:00
renovate[bot]
381ddca358 fix(deps): update dependency ldapjs to v2.3.3 2024-09-29 12:47:59 +00:00
Reto Brunner
3d33ef8083 Merge branch 'topic' 2024-09-29 14:46:21 +02:00
Reto Brunner
0c57694c00 bump irc-framework to 4.14 2024-09-29 14:38:53 +02:00
Reto Brunner
834b12218e Merge branch 'actualUsername' into frameWork 2024-09-29 14:27:18 +02:00
dependabot[bot]
e81273148b build(deps): bump braces from 3.0.2 to 3.0.3
Bumps [braces](https://github.com/micromatch/braces) from 3.0.2 to 3.0.3.
- [Changelog](https://github.com/micromatch/braces/blob/master/CHANGELOG.md)
- [Commits](https://github.com/micromatch/braces/compare/3.0.2...3.0.3)

---
updated-dependencies:
- dependency-name: braces
  dependency-type: indirect
...

Signed-off-by: dependabot[bot] <support@github.com>
2024-09-29 12:07:53 +00:00
Reto Brunner
6d6179c69d update dependency @types/ws to v8.5.12 2024-09-29 13:58:53 +02:00
Reto Brunner
6f09b6fd70 update dependency postcss to v8.4.47 2024-09-29 13:58:00 +02:00
Reto Brunner
a016db68bb update dependency mime-types to v2.1.35 2024-09-29 13:55:13 +02:00
Reto Brunner
2962b07c1f update dependency webpack to v5.94.0 2024-09-29 13:52:53 +02:00
Reto Brunner
e7aff2862a update dependency cheerio to v1.0.0 2024-09-29 13:49:00 +02:00
Reto Brunner
ca2c231eec update dependency node-forge to v1.3.1 2024-09-29 13:46:20 +02:00
Reto Brunner
a196b1ad95 update dependency express to v4.20.0 2024-09-29 13:45:01 +02:00
renovate[bot]
05a87130ee fix(deps): update dependency express to v4.20.0 [security] 2024-09-21 10:53:24 +00:00
renovate[bot]
a6af6bb45c chore(deps): update dependency postcss to v8.4.47 2024-09-15 15:58:39 +00:00
arminius-smh
ac485c483b server: fix loading themes from scoped packages
Scoped packages have slashes in them, that led to them being loaded at
the wrong path. Encoding the name fixes this.
2024-09-04 12:25:48 +02:00
arminius-smh
0a4adc4592 server: fix scoped package install
Installing a scoped npm package with thelounge install lead to an error,
because the original split that was used to split the version from the
package, split at the first @ from scoped packages.
2024-09-04 12:25:48 +02:00
renovate[bot]
8ed898846c chore(deps): update dependency webpack to v5.94.0 [security] 2024-09-04 02:03:07 +00:00
renovate[bot]
374c6a9b04 fix(deps): update dependency node-forge to v1.3.1 2024-09-01 00:52:03 +00:00
renovate[bot]
6b30b07fc5 fix(deps): update dependency cheerio to v1.0.0 2024-09-01 00:51:51 +00:00
Reto Brunner
e42ad91e04 whois: support actual_username field
Some servers (e.g. InspIRCd v4) support the concept of a real username,
i.e. the username that was originally sent as distinct from their virtual
username set by services.

Closes: https://github.com/thelounge/thelounge/issues/4900
2024-08-19 07:34:18 +02:00
renovate[bot]
22388087df fix(deps): update dependency mime-types to v2.1.35 2024-08-01 03:43:04 +00:00
renovate[bot]
f89288414a chore(deps): update dependency @types/ws to v8.5.12 2024-08-01 00:53:42 +00:00
Reto Brunner
a61bc14456 remove dns resolution order override
This is the default for node 18.
2024-07-24 19:42:01 +02:00