-
v14.0.06d98fc91 · ·
v14.0.0 **Important note**: if you got an error on updating the plugin, please try to restart Peertube and install it again. **Breaking changes** The livechat v13 introduced a new library to handle regular expressions in forbidden words, to avoid [ReDOS](https://en.wikipedia.org/wiki/ReDoS) attacks. Unfortunately, this library was not able to install itself properly on some systems, and some admins were not able to install the livechat plugin. That's why we have disabled this library in v14, and introduce a new settings to enable regexp in forbidden words. By default this settings is disabled, and your users won't be able to use regexp in their forbidden words. The risk by enabling this feature is that a malicious user could cause a denial of service for the chat bot, by using a special crafted regular expression in their channel options, and sending a special crafter message in one of their rooms. If you trust your users (those who have rights to livestream), you can enable the settings. Otherwise it is not recommanded. See the documentation for more informations. If you had users using regular expressions, those "forbidden words" list are disabled when updating the livechat plugin. To restore them, you must first enable the "Enable regular expressions for channel's forbidden words" settings, then your users have to go to their channel's chatroom options and enable them again. **Minor changes and fixes** * Channel's forbidden words: new "enable" column. * New settings to enable regular expressions for channel forbidden words. * "Channel advanced configuration" settings: removing the "experimental feature" label. * NPM packages security fixes.
-
v13.0.01e7e851d · ·
v13.0.0 **Security Fix** Severity: low. [Radically Open Security](radicallyopensecurity.com) reported a security vulnerability: a malicious user can forge a malicious Regular Expression to cause a [ReDOS](https://en.wikipedia.org/wiki/ReDoS) on the Chat Bot. Such attack would only make the bot unresponsive, and won't affect the Peertube server or the XMPP server. This version mitigates the attack by using the [RE2](https://github.com/google/re2) regular expression library. Thanks [NlNet](https://nlnet.nl/) for funding the security audit. **Breaking changes** Bot timers: There was a regression some months ago in the "bot timer" functionnality. In the channels settings, the delay between two quotes is supposed to be in minutes, but in fact we applied seconds. We don't have any way to detect if the user meant seconds or minutes when they configured their channels (it depends if it was before or after the regression). So we encourage all streamers to go through their channel settings, check the frequency of their bot timers (if enabled), set them to the correct value, and save the form. Users must save the form to be sure to apply the correct value. Bot forbidden words: When using regular expressions for the forbidden words, the chat bot now uses the [RE2](https://github.com/google/re2) regular expression library. This library does not support all character classes, and all regular expressions that were previously possible (with the Javascript RegExp class). For more information about the accepted regular expression, please refer to the [documentation](https://livingston.frama.io/peertube-plugin-livechat/documentation/user/streamers/bot/forbidden_words/#consider-as-regular-expressions). If you configured non-compatible regular expressions, the bot will just ignore them, and log an error. When saving channel's preference, if non-compatible regular expression is used, an error will be shown. **Minor changes and fixes** * Translations updates. * Dependencies updates. * Fix #329: auto focus message field after anonymous user has entered nickname (Thanks [Axolotle](https://github.com/axolotle). * Fix #392: add draggable items touch screen handling (Thanks [Axolotle](https://github.com/axolotle). * Fix #506: hide offline users by default in occupant list (Thanks [Axolotle](https://github.com/axolotle). * Fix #547: add button to go to the end of the chat (Thanks [Axolotle](https://github.com/axolotle). * Fix #503: set custom emojis max height to text height + bigger when posted alone (Thanks [Axolotle](https://github.com/axolotle). * Fix: Converse bottom panel messages not visible on new Peertube v7 theme (for example for muted users). * Fix #75: New short video urls makes it difficult to use the settings «Activate chat for these videos». * Fix moderation notes: fix filter button wrongly displayed on notes without associated occupant. * Fix tasks: checkbox state does not change when clicked. * Fix: bot timer can't be negative or null. * Fix #626: Bot timer was buggy, using seconds as delay instead of minutes. * Fix: message deletions were not properly anonymized when using "Anonymize moderation actions" option.
-
v12.0.46b30886b · ·
v12.0.4 Minor changes and fixes * Fix #660: don't send headers twice on emoji router errors. * Fix shebangs (for NixOS compatibility). * Translations updates. * Updating various dependencies. * Adding a warning in settings if theme is not set to Peertube or if autocolors are disabled.
-
v12.0.37fd895c8 · ·
v12.0.3 Minor changes and fixes: * Translations updates. * Slovak translation integration. * Differenciate pt-PT and pt-BR translations. * Fix styling for "configure mod_firewall" button + Peertube v7.0.0 compatibility. * Fix #648: workaround for a regression in Firefox that breaks the scrollbar (Thanks [Raph](https://github.com/raphgilles) for the workaround!).
-
v12.0.0a37438bd · ·
v12.0.0 This version requires Peertube 5.2.0 or superior. It also requires NodeJS 16 or superior (same as Peertube 5.2.0.). If you use the "system Prosody", you should update to Prosody 0.12.4, and Lua 5.4. * #131: Emoji only mode. * #516: new option for the moderation bot: forbid duplicate messages. * #517: new option for the moderation bot: forbid messages with too many special characters. * #518: moderators can send announcements and highlighted messages. * #610: compatibility with PeerTube v7 * Updating ConverseJS (v11 WIP) with latest fixes. * Updating Prosody AppImage to Prosody 0.12.4 + Lua 5.4. * Various translation updates. * Using Typescript 5.5.4, and Eslint 8.57.0 (with new ruleset). * Fix race condition in bot/ctl. * Various type improvements. * Update dependencies. * Fix emoji picker colors and size. * Fix: moderation delay max value was not correctly handled.
-
v11.0.0575703a7 · ·
v11.0.0 Importante Notes: * With the new [mod_firewall](https://livingston.frama.io/peertube-plugin-livechat/documentation/admin/mod_firewall/) feature, Peertube admins can write firewall rules for the Prosody server. These rules could be used to run arbitrary code on the server. If you are a hosting provider, and you don't want to allow Peertube admins to write such rules, you can disable the online editing by creating a `disable_mod_firewall_editing` file in the plugin directory. Check the documentation for more information. This is opt-out, as Peertube admins can already run arbitrary code just by installing any plugin. * The concord theme was removed from ConverseJS. If you had it set in the plugin settings, it will fallback to the Peertube theme. New features: * Updating ConverseJS, to use upstream (v11 WIP). This comes with many improvements and new features. * #146: copy message button for moderators. * #137: option to hide moderator name who made actions (kick, ban, message moderation, ...). * #144: [moderator notes](https://livingston.frama.io/peertube-plugin-livechat/documentation/user/streamers/moderation_notes/). * #145: action for moderators to find all messages from a given participant. * #97: option to use and configure [mod_firewall](https://livingston.frama.io/peertube-plugin-livechat/documentation/admin/mod_firewall/) at the server level. Minor changes and fixes: * #118: improved accessibility. * Avatar set for anonymous users: new 'none' choice (that will fallback to Converse new colorized avatars). * New translation: Albanian. * Translation updates: Crotian, Japanese, traditional Chinese, Arabic, Galician. * Updated mod_muc_moderation to upstream. * Fix new task ordering. * Fix: clicking on the current user nickname in message history was failing to open the profile modal. * Fix: increase chat height on small screens, try to better detect the device viewport size and orientation. * Converse theme: removed concord, added cyberpunk. * Fixed Converse theme settings localization. * Fix: improved minimum chat width.
-
v10.2.05eb0ae41 · ·
v10.2.0 New features: * #231: [polls](https://livingston.frama.io/peertube-plugin-livechat/documentation/user/streamers/polls/). * #233: new option to [mute anonymous users](https://livingston.frama.io/peertube-plugin-livechat/documentation/user/streamers/moderation/). * #18: terms & conditions. You can configure terms&conditions on your instance that will be shown to each joining users. Streamers can also add [terms&conditions in their channels options](https://livingston.frama.io/peertube-plugin-livechat/documentation/user/streamers/terms/). Minor changes and fixes: * Fix #449: Remove the constraint for custom emojis shortnames to have ":" at the beginning and at the end. * Translations updates: french, german, crotian, polish, slovak.
-
v10.1.001b93c18 · ·
v10.1.0 New features: * #130: Channel custom emojis. * #98: OBS Dock. You can now generate links to join chatrooms with your current user. This can be used to create Docks in OBS for example. This could also be used to generate authentication token to join the chat from 3rd party tools. * Overhauled configuration page, with more broadly customizable lists of parameters by @Murazaki ([See pull request #352](https://github.com/JohnXLivingston/peertube-plugin-livechat/pull/352)). * #377: new setting to listen C2S connection on non-localhost interfaces. Minor changes and fixes: * Fix cleanup on channel deletion. * #416: Deregister prosodyctl interval callback when spawn.stdin disappears. * #423: Merging video-watch scope into common scope. * Rewriting the share chat dialog with more modern code for a better UI/UX. * #400: Reading livechat-active parameter on live creation API endpoint. So that the Android Peertube Live app can pass the parameter withing the first (and only) API call.
-
v10.0.085182929 · ·
v10.0.0 New features: * #177: streamer's task/to-do lists: streamers, and their room's moderators, can handle task lists directly. This can be used to handle viewers questions, moderation actions, ... More info in the [tasks documentation](https://livingston.frama.io/peertube-plugin-livechat/fr/documentation/user/streamers/tasks/). * #385: new way of managing chat access rights. Now streamers are owner of their chat rooms. Peertube admins/moderators are not by default, so that their identities are not leaking. But they have a button to promote as chat room owner, if they need to take action. Please note that there is a migration script that will remove all Peertube admins/moderators affiliations (unless they are video/channel's owner). They can get this access back using the button. * #385: the slow mode duration on the channel option page is now a default value for new rooms. Streamers can change the value room per room in the room's configuration. Minor changes and fixes: * Fixed some styling when chatbox is small (hidding avatars).