Peter Jaszkowiak

Still wondering what the motivation is here. Do you have some code using the header that broke? Regardless please add a comment explaining what your added code does.

That sounds more like a restriction for what is allowed in headers, in which case URL encoding might be a better solution.

What delivery medium would you use for the magic URL besides email?

@hello-smile6 FYI, you can set up Gmail in the built in SMTP transport.

Why is your database and config public? Your user sessions can easily be hacked if someone can access the secret in config.json > Tried to, it wanted me to enable...

https://www.npmjs.com/package/bcrypt > The async version uses a thread pool which does not block the main event loop.

Oh hmm never mind. Gonna change this issue to be modifying our code to use a thread pool instead of spinning up processes.

Okay so I guess the main issue here is that the sidebar doesn't close when going "back". I've been unable to trigger this on Android. It looks to me like...

I believe NodeBB has a frame-options header setting in the ACP. Try setting it to `ALLOW-FROM example.com`.

Improved plugin code: ```js myPlugin.filterTeasersConfigureStripTags = function (hookData) { hookData.tags = hookData.tags.filter(x => x !== 'img'); return hookData; }); ```