Commit Graph

23 Commits

Author SHA1 Message Date
3624dd5c3c Reverting usage of RE2 (WIP):
**Breaking changes**

The livechat v13 introduced a new library to handle regular expressions in forbidden words, to avoid
[ReDOS](https://en.wikipedia.org/wiki/ReDoS) attacks.
Unfortunately, this library was not able to install itself properly on some systems, and some admins were not able
to install the livechat plugin.

That's why we have disabled this library in v14, and introduce a new settings to enable regexp in forbidden words.
By default this settings is disabled, and your users won't be able to use regexp in their forbidden words.

The risk by enabling this feature is that a malicious user could cause a denial of service for the chat bot, by using a
special crafted regular expression in their channel options, and sending a special crafter message in one of their
rooms. If you trust your users (those who have rights to livestream), you can enable the settings. Otherwise it is not
recommanded. See the documentation for more informations.

**Minor changes and fixes**

* Channel's forbidden words: new "enable" column.
* New settings to enable regular expressions for channel forbidden words.
* "Channel advanced configuration" settings: removing the "experimental feature" label.
2025-06-19 17:11:13 +02:00
80a5b76172 Updating SPDX headers. 2025-06-09 10:48:43 +02:00
0be11fb2ae Security Fix: mitigate ReDOS attacks on the chat bot. 2025-06-06 16:41:22 +02:00
5225257bb5 New option for the moderation bot: forbid duplicate messages (#516). 2024-09-11 10:34:44 +02:00
f15d3ed542 New option for the moderation bot:
* forbid messages with too many special characters (#517).
* update moderation bot to v0.4.0.
* refactoring localization segments to reuse existing one in multiple
  context.
* npm run doc:translate
2024-09-07 12:40:38 +02:00
91cddfa8d8 Emoji only mode WIP:
* Button to enable it on all rooms.
2024-09-06 11:53:07 +02:00
08017ac2bb Emoji only mode WIP:
* refactoring + optimization
* migration
2024-09-06 11:01:48 +02:00
1a75b30c50 Emoji only mode WIP 2024-09-05 18:28:54 +02:00
83dd3130a1 Fix #436: Saving emojis per batch, to avoid hitting max payload limit. 2024-06-20 11:14:00 +02:00
92e9d6d1af Custom channel emoticons WIP (#130) 2024-06-07 13:45:05 +02:00
688ab4f029 Custom channel emoticons WIP (#130) 2024-06-07 13:45:04 +02:00
dad29a941f Custom channel emoticons WIP (#130) 2024-06-07 13:45:04 +02:00
d5c327565c Adding SPDX headers (WIP) 2024-05-23 11:42:14 +02:00
0719d25f35 Fix #48: Proper 404 and 403 pages when trying to open non-existant chatroom (WIP). 2024-04-04 14:58:24 +02:00
e5e6c6f953 Room list: using new chat page 2024-04-03 12:13:44 +02:00
bd695bdb27 New fullscreen chat WIP:
* Fullscreen chat: now uses a custom page (in other words: when opening the chat in a new tab, you will have the Peertube menu). WIP
* some code refactoring (getBaseRoute moved to util/uri, ...)
2024-03-26 11:09:46 +01:00
353f2d03f3 Fix disabling bot 2023-09-26 14:37:56 +02:00
aa71a302f6 Channel Configuration UI WIP 2023-09-22 16:45:08 +02:00
cc673bd3cb Refactoring. 2023-09-22 16:45:08 +02:00
a8c71fbadf Store Bot configuration 2023-09-22 16:45:04 +02:00
1a1b246d45 refactoring. 2023-09-22 16:45:03 +02:00
d410d4e08e Settings to disable the bot and the advances channel configuration 2023-09-22 16:45:02 +02:00
5373fb1570 Renaming 'moderation' pages to 'configuration'. 2023-09-22 16:45:02 +02:00