hedgedoc

github/hedgedoc

Fork 0

mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-10-19 22:00:15 -04:00

Commit graph

Author	SHA1	Message	Date
Sheogorath	a2522888b2	Remove PDF export As we already decleared in earlier versions, this patch removes PDF export entirely. It's a not acceptable security risk for every CodiMD instance. The current implementation allowed to extract arbitary files from the CodiMD host and therefore leaking secrets from a `/etc/passwd` to CodiMD's own config files and all secrets contained in it. Thanks to Joona for finding this vulnerability in August last year, which lead to an emergency disabling of PDF exports in 1.5.0. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>	2020-02-26 15:05:54 +01:00
Erik Michelson	93ca037a75	WIP: Adding openapi doc Signed-off-by: Erik Michelson <erik@liltv.de>	2019-10-15 00:58:40 +02:00
Erik Michelson	447d9bc1d8	Added API-doc as markdown file Signed-off-by: Erik Michelson <erik@liltv.de>	2019-10-13 01:34:09 +02:00

Author

SHA1

Message

Date

Sheogorath

a2522888b2

Remove PDF export

As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>

2020-02-26 15:05:54 +01:00

Erik Michelson

93ca037a75

WIP: Adding openapi doc

Signed-off-by: Erik Michelson <erik@liltv.de>

2019-10-15 00:58:40 +02:00

Erik Michelson

447d9bc1d8

Added API-doc as markdown file

Signed-off-by: Erik Michelson <erik@liltv.de>

2019-10-13 01:34:09 +02:00

3 commits