I am not sure if this was posted before (I searched).
It's more a "web2.0" enchantment than a bug that concerns AJAX and Browser history.
If you open a member's profile, e.g. ejm and hit his Postings tab, wait for the ajax request to complete and click on a random post of him (you mustn't open...
I was able to post some messages on a xenforo-based community where it was allowed for non-registered users to submit their posts. The form didn't ask for an email. Is this by default or the admin disabled it on purpose?
To reproduce it try pasting a link before the "Insert Link" modal window fully loads in browser. If you do it right you will have pasted the link to the form behind the modal window and get the text you had selected, unselected. After the modal loads, type a url and hit insert. Modal now...
Tested here, at the official xenForo community, just some minutes ago.
Create a dummy account for this test purpose.
Verify the e-mail.
Change user's e-mail to an invalid one (but do not verify).
Change your password to something you will not remember.
Try to login.
There seems to be an error when importing a language .xml with many phrases via the Language Importer.
Reproduce in debug mode:
1) Export the English (US) language (βeta 5) with all XenForo phrases.
2) Edit the downloaded file and change the title value to something else, ex.
See more @ http://samy.pl/evercookie/
Anyone can easily change their IP address and delete their session cookies, something that allows banned members to easily re-register.
It'd be awesome if evercookie gets implemented somehow in xenforo. An add-on would also do nice I suppose. Test it by...
Here's the thing;
If you click the right arrow, it shows the 52th page button and replaces the arrow. It also removes the 47th anchor element.
It should show the 52th page button by default, without the need of an additional click. Doncha think?