Recent content by stromb0li

If viewing an album and the media is of type video with embedded content (e.g. youtube video), once you press play, if you click the arrow to browse the next item in the album, the previous will continue to play instead of stopping the previous video. Repo can be done on XF website...

Not to toot my horn, but this version paired with the refund addon I have is... Still definitely room for improvement, but this version has processed literally thousands of payments in my production environment with no issues.

XF\ForumType\DiscussionHandler::addTypeConfigToApiResult() builds the API's allowed_thread_types with the array union operator: 'allowed_thread_types' => [$this->getDefaultThreadType($forum)] + $forum->type_config['allowed_thread_types'], + keeps the left operand's keys and only adds keys the...

I am not using enhanced search. That's weird xenforo would allow 3 characters without the add-on being available :/

I switched 4 character to 3 character minimum search string. Then went to Tools -> Rebuild caches and selected Rebuild search index for all content types. After rebuild of the index, I still don't see any results. Is there another step I need to do to rebuild the cache?

While having a defined time zone is great for people accessing a website on their desktop computer, people are mobile, accessing websites from laptops, tablets, phones on a plane, and I'm sure someone has accessed some sort of content on a website rendered from a xenforo based website from space...

The OAuth response returned from Apple is via a cross-site POST (response_mode=form_post). XenForo sets no SameSite attribute on its session cookies, so browsers treat them as SameSite=Lax by default (Lax cookies are withheld on cross-site POSTs (at least for chromium browsers like Chrome and...

This is gray on a feature ask vs bug, but hoping I can sneak it into the bug fix bucket as a potential security improvement. Ask: Support prompt=login (and ideally max_age=0) at the OAuth2 authorization endpoint (e.g. /oauth2/authorize endpoint) so relying parties can force re-authentication...

stromb0li updated Payment Profile: Authorize.Net with ARB with a new update entry: v1.5.5 Read the rest of this update entry...

Yes I have the API completed as an add-on

Can confirm that's an issue. There's also another which is handling special characters (used on the description during refund) for the purchase, which Authorize.net doesn't seem to like. Not sure when I'll get the next release out, but it's on my radar.

stromb0li updated Payment Profile: Authorize.Net with ARB with a new update entry: v1.5.4 - Minor fixes Read the rest of this update entry...

It looks like oauth tokens aren't cleaned up during account deletion. The User entity's _postDelete() doesn't seem to invoke cleanup on these tables, nor do I see anything in DeleteCleanUpService.php Tables in question: xf_api_login_token xf_oauth_token xf_oauth_request xf_oauth_refresh_token

Appreciate the heads up!

Sorry for double post, but the place I am targeting is custom field values. It looks like custom field definitions use json, but the values stored for the user don't? I just noticed XF uses Php::safeUnserialize(); I'll switch to that instead of unserialize as-is.