Hi everybody — late last week we released v4.11.0, which contains the following changes:
New pages have been added to the control panel to display analytics (send/receive counts) and error counts. There is also a new error page that will show error received within the last 24 hours, and their respective payloads.…
Since 2017, we've maintained a bug bounty program that awarded responsible disclosure of security vulnerabilities on a sliding scale of $64 to $512 based on severity.
Throughout the years we've made some unpublished changes to this bounty program, mostly related to the format (no videos, text only, allowed testing endpoints) and in some cases expanding the scope of covered plugins (e.g. 2factor,…
Stoked to see BSD Cafe has a new site... Running NodeBB :sunglasses:
https://billboard.bsd.cafe/
Considering they don't run _just anything_ , we're in good company! Their other instances run Mastodon (of course) and snac2, arguably one of the most lightweight ActivityPub services.[...]
Hi everybody,
With spring around the corner (it is currently a balmy 5°C here right now), it's time to get crackin' on a new release of NodeBB!
We focused on a lot of user experience updates this time around, along with tweaking the new /world page that was introduced in v4.9.0. In the backend, lots of optimizations were implemented, which make federation processing (and day-to-day…
Up until today, when you queried a NodeBB user or category's outbox, you would receive an empty OrderedCollection. This was done because the property's inclusion in the actor object was required , but it was not immediately apparent in 2024 how many people utilised this property. Thus it was easier to just send the empty outbox and pursue more urgent functionality.
While sending that…
We are publishing a notice today to bring to attention an unintentional breaking change that could affect some users of NodeBB.
v4.5.0 contained an update to src/request.js that calls a DNS resolver to ensure that the destination address is not a reserved IP address (e.g. 192.168..., 127.0..)
This change was introduced in order to close off any potential for Server-Side Request Forgery…
The hardest part of building a community is getting your users. If you don't have users, you don't have content, and if you don't have content, users won't join your forum. This chicken-and-egg game leads to many communities closing down due to lack of usage. Federation allows you to bypass this step by allowing you to "adopt" the fediverse as a source of content, so you don't have to worry about…
Hello all!
(Sorry, I could not resist with the title :laughing:)
Today we are releasing NodeBB v4.9.0, on a Friday, toward the end of the day, because we like having our weekends ruined.
As usual, we recommend you update to this stable version of NodeBB, not least because it fixes a federation issue accidentally introduced last month.
There are a bunch of new features and usability…
Federating content to other platforms comes with its own share of surprises. Sometimes your content is faithfully shared and rendered the way you mean it to be, and sometimes it is remixed and changed in ways you didn't expect.
It's up to the receiving end as to how to best represent your content, but NodeBB will always try its best to send a version of your content out that looks like what is…
It is possible for NodeBBs to talk with each other. In fact, not only can two NodeBB forums see and share conversations, you can also connect with other websites that can federate.
_This article is part of theNodeBB Answers category, where you can learn more about setting up, maintaining, and using your NodeBB forum._ [...]