github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-10-20 06:02:09 -04:00
Code Issues Projects Releases Packages Wiki Activity
2474 commits 40 branches 47 tags 110 MiB
Commit graph

3 commits

Author SHA1 Message Date
David Mehren
3340780157
Migrate config templates to TypeScript 
Signed-off-by: David Mehren <dmehren1@gmail.com>
 2020-04-25 16:04:05 +02:00
Sheogorath
a2522888b2
Remove PDF export 
As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2020-02-26 15:05:54 +01:00
Sheogorath
2411dffa2c
Change config to camel case with backwards compatibility 
This refactors the configs a bit to now use camel case everywhere.
This change should help to clean up the config interface and make it
better understandable.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
 2018-03-25 19:08:14 +02:00