Reverting usage of RE2 (WIP):

**Breaking changes**

The livechat v13 introduced a new library to handle regular expressions in forbidden words, to avoid
[ReDOS](https://en.wikipedia.org/wiki/ReDoS) attacks.
Unfortunately, this library was not able to install itself properly on some systems, and some admins were not able
to install the livechat plugin.

That's why we have disabled this library in v14, and introduce a new settings to enable regexp in forbidden words.
By default this settings is disabled, and your users won't be able to use regexp in their forbidden words.

The risk by enabling this feature is that a malicious user could cause a denial of service for the chat bot, by using a
special crafted regular expression in their channel options, and sending a special crafter message in one of their
rooms. If you trust your users (those who have rights to livestream), you can enable the settings. Otherwise it is not
recommanded. See the documentation for more informations.

**Minor changes and fixes**

* Channel's forbidden words: new "enable" column.
* New settings to enable regular expressions for channel forbidden words.
* "Channel advanced configuration" settings: removing the "experimental feature" label.
This commit is contained in:
John Livingston
2025-06-19 12:07:39 +02:00
parent e41529b61f
commit 3624dd5c3c
65 changed files with 343 additions and 2145 deletions

View File

@ -6,11 +6,10 @@
msgid ""
msgstr ""
"Project-Id-Version: peertube-plugin-livechat-documentation VERSION\n"
"POT-Creation-Date: 2025-06-06 17:07+0200\n"
"POT-Creation-Date: 2025-06-19 17:09+0200\n"
"PO-Revision-Date: 2025-06-08 22:46+0000\n"
"Last-Translator: fran secs <fransecs@gmail.com>\n"
"Language-Team: Catalan <https://weblate.framasoft.org/projects/"
"peertube-livechat/peertube-plugin-livechat-documentation/ca/>\n"
"Language-Team: Catalan <https://weblate.framasoft.org/projects/peertube-livechat/peertube-plugin-livechat-documentation/ca/>\n"
"Language: ca\n"
"MIME-Version: 1.0\n"
"Content-Type: text/plain; charset=UTF-8\n"
@ -3083,25 +3082,17 @@ msgstr "![Captura de pantalla d'un missatge de xat que s'ha suprimit, amb el mot
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/bot/forbidden_words.md
msgid "You can fill several \"{{% livechat_label livechat_configuration_channel_forbidden_words_label %}}\" lines. When a user sends a message that match the configured criteria, the message will automatically be deleted."
msgstr ""
"Podeu omplir diverses línies «{{% livechat_label "
"livechat_configuration_channel_forbidden_words_label %}}». Quan s'envia un "
"missatge que coincideix amb un dels criteris configurats s'eliminarà "
"automàticament."
msgstr "Podeu omplir diverses línies «{{% livechat_label livechat_configuration_channel_forbidden_words_label %}}». Quan s'envia un missatge que coincideix amb un dels criteris configurats s'eliminarà automàticament."
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/bot/forbidden_words.md
msgid "Here you can configure several words, group of words, or \"regular expressions\"."
msgstr ""
"Aquí podeu configurar diversos mots, grups de paraules o «expressions "
"regulars»."
msgstr "Aquí podeu configurar diversos mots, grups de paraules o «expressions regulars»."
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/bot/forbidden_words.md
msgid "Each time a user sends a message, these words will be tested. If the message contains one of them, the message will be deleted."
msgstr ""
"Cada vegada que algú envia un missatge aquestes paraules seran comprovades. "
"Si el missatge conté algun d'aquests el missatge s'eliminarà."
msgstr "Cada vegada que algú envia un missatge aquestes paraules seran comprovades. Si el missatge conté algun d'aquests el missatge s'eliminarà."
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/bot/forbidden_words.md
@ -3141,13 +3132,10 @@ msgstr "En marcar aquesta opció cada línia del camp «{{% livechat_label livec
#. type: Plain text
#: build/documentation/pot_in/documentation/user/streamers/bot/forbidden_words.md
msgid "Please note that not all regular expression are accepted. Under the hood, we are using the [node-re2](https://github.com/uhop/node-re2) library. Please check [node-re2](https://github.com/uhop/node-re2) and [RE2 documentation](https://github.com/google/re2/wiki/Syntax) for more information about the accepted syntax and the limitations."
msgstr ""
"Tingueu en compte que no totes les expressions regulars s'accepten. Per sota "
"utilitzem la biblioteca [node-re2](https://github.com/uhop/node-re2). "
"Consulteu [node-re2](https://github.com/uhop/node-re2) i la "
"[documentació de RE2](https://github.com/google/re2/wiki/Syntax) per obtenir "
"més informació sobre la sintaxi acceptada i les limitacions."
#, fuzzy
#| msgid "This feature can be disabled by the instance's adminitrators."
msgid "This feature is optional and can be disabled by admins."
msgstr "Aquesta funció la pot desactivar l'administració de la instància."
#. type: Yaml Front Matter Hash Value: description
#: support/documentation/content/en/documentation/user/streamers/bot/_index.md
@ -4999,3 +4987,6 @@ msgstr "[fites a github](https://github.com/JohnXLivingston/peertube-plugin-live
#: support/documentation/content/en/issues/_index.md
msgid "If you are a webdesigner or a ConverseJS/Prosody/XMPP expert, and want to help improve this plugin, you are welcome."
msgstr "Si us dediqueu al disseny web o teniu experiència en ConverseJS/Prosody/XMPP i voleu participar en l'evolució d'aquest connector, us animem a fer-ho."
#~ msgid "Please note that not all regular expression are accepted. Under the hood, we are using the [node-re2](https://github.com/uhop/node-re2) library. Please check [node-re2](https://github.com/uhop/node-re2) and [RE2 documentation](https://github.com/google/re2/wiki/Syntax) for more information about the accepted syntax and the limitations."
#~ msgstr "Tingueu en compte que no totes les expressions regulars s'accepten. Per sota utilitzem la biblioteca [node-re2](https://github.com/uhop/node-re2). Consulteu [node-re2](https://github.com/uhop/node-re2) i la [documentació de RE2](https://github.com/google/re2/wiki/Syntax) per obtenir més informació sobre la sintaxi acceptada i les limitacions."