hedgedoc/lib
Sheogorath d097211c54
Fix unauthenticated file uploads
This patch fixes the issue of unauthenticated users, being able to
upload files, even when anonymous edits are disabled.

It's implemented by blocking uploads when either `allowAnonymous` is set
to `false` for all unauthenticated users, unless `allowAnonymousEdits`
is set to true, to make sure anonymous editors still experience the full
feature set.

Signed-off-by: Christoph Kern <sheogorath@shivering-isles.com>
2020-12-27 19:51:01 +01:00
..
config Merge pull request #597 from hedgedoc/fix/install-docs 2020-11-29 15:51:43 +01:00
migrations Add missing catch 2020-12-02 19:39:06 +01:00
models Replace CodiMD with HedgeDoc 2020-11-14 21:18:36 +01:00
ot Fix logging in ot module 2018-11-13 23:30:13 +01:00
web Fix unauthenticated file uploads 2020-12-27 19:51:01 +01:00
workers Rework debug logging 2019-06-08 21:27:29 +02:00
csp.js Add missing unsafe-inline CSP directive 2020-08-23 01:29:53 +02:00
errors.js Fix broken redirect on login 2020-03-21 16:56:09 +01:00
history.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
letter-avatars.js Fix eslint warnings 2019-05-31 00:30:29 +02:00
logger.js Fix eslint warnings 2019-05-31 00:30:29 +02:00
realtime.js remove unused variable to pass ci testing - #58 2019-10-03 09:24:46 -04:00
response.js Replace CodiMD with HedgeDoc 2020-11-14 21:18:36 +01:00
utils.js Makes the mime also work with upper case extension 2020-11-12 21:06:09 +01:00