github/hedgedoc
1
0
Fork 0
mirror of https://github.com/hedgedoc/hedgedoc.git synced 2024-12-29 13:03:48 +00:00
Code Issues Projects Releases Packages Wiki Activity
hedgedoc/docs
History
Sheogorath a2522888b2
Remove PDF export 
As we already decleared in earlier versions, this patch removes PDF
export entirely. It's a not acceptable security risk for every CodiMD
instance.

The current implementation allowed to extract arbitary files from the
CodiMD host and therefore leaking secrets from a `/etc/passwd` to
CodiMD's own config files and all secrets contained in it.

Thanks to Joona for finding this vulnerability in August last year,
which lead to an emergency disabling of PDF exports in 1.5.0.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2020-02-26 15:05:54 +01:00
..
dev Remove PDF export 2020-02-26 15:05:54 +01:00
guides Remove mattermost integration 2020-02-25 14:33:30 +01:00
images
legal Move DCO into docs section 2019-06-10 17:35:36 +02:00
setup Remove PDF export 2020-02-26 15:05:54 +01:00
configuration-config-file.md Remove PDF export 2020-02-26 15:05:54 +01:00
configuration-env-vars.md Remove PDF export 2020-02-26 15:05:54 +01:00
history.md
slide-options.md