hedgedoc/lib
Sheogorath a2522888b2
Remove PDF export
As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-02-26 15:05:54 +01:00
..
config Remove PDF export 2020-02-26 15:05:54 +01:00
migrations
models Remove mattermost integration 2020-02-25 14:33:30 +01:00
ot
web Remove PDF export 2020-02-26 15:05:54 +01:00
workers
app.js Remove PDF export 2020-02-26 15:05:54 +01:00
csp.js Update RevealJS to version 3.9.2 2020-02-01 12:53:15 +01:00
errors.js Making the linter happy by removing superfluous ; 2019-11-28 14:00:34 +01:00
history.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
letter-avatars.js
logger.js
realtime.js
response.js Move showPublishNote and publishNoteActions to note controller 2019-10-27 15:23:38 +01:00
utils.js Move slide actions to own file 2019-10-27 14:27:15 +01:00