BlogEngine.NET

BlogEngine.NET copied to clipboard

Hi, I lost the option to edit widgets for some weird reason I will try and find the problem and make a correction /Peter

plykkegaard

"Error loading lookups" - `Newtonsoft.Json.JsonReaderException` due to Gallery site down

1

https://github.com/BlogEngine/BlogEngine.NET/blob/11b9f177b91a82230efaa8376ea68da64b064d45/BlogEngine/BlogEngine.Core/Services/Packaging/Gallery.cs#L74-L92 Sadly, the url `http://dnbe.net/v01/nuget` is down. Therefore, `JsonConvert.DeserializeObject` throws a `Newtonsoft.Json.JsonReaderException`, and causes an `Error loading lookups` (GET `/api/lookups` returns 502), makes **the whole blog unstable** - e.g. Unable...

UlyssesWu

Hi I got a notice from my hosting company Looks like the email forms are vulnerable to spam bot attacks? Message from the hosting provider _Spam bots are trying to...

plykkegaard

Cannot load the third party themes, plugins and widgets under custom menu

1

Third Party themes, plugins and widgets are not loading up, the issue was also posted in 2017 but it still exist in latest build 3.3.8. Please suggest some solutions thanks....

MuhammadZeshan382

Malicious File Upload Vulnerability

2

UploadController.cs file does not have any security control if the Editor chose to upload a video. Between Line 101 and 110 on UploadController.cs, it gets a file submitted via HTTP...

hacip

I wanted to verify that the latest release is version 3.3.8 and not 3.6 per the website (https://blogengine.io/news/blogengine-3.6-released/)

clockwiseq

Deployable to Azure Static Web App?

1

I see that you are working on a [new version ](https://blogengine.io/news/blogengine-2023/) with all the new bells and whistles and I was wondering if that version would by any change run...

sturlath

Remove default machineKey

1

Remove default machineKey as it is a serious security issue. The default behavior is to let the framework generate a new machineKey on each restart. This will work in most...

bugch3ck

There is no validation for the year and month variables line between 158-160 on default.aspx.cs. Additionally, these parameters were used to build another variable named "rewrite", and the "rewrite" parameter...

hacip

Bumps jQuery from 2.1.4 to 3.5.0. [](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a...

dependabot[bot]