mirror of
https://github.com/hedgedoc/hedgedoc.git
synced 2024-12-25 19:00:49 +00:00
ef86bf5cba
As recently discovered we send the clientSecret to the webclient which is potentionally dangerous. This patch should fix the problem and replace the clientSecret with the originally intended and correct way to implement it using the API key. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com> |
||
---|---|---|
.. | ||
config | ||
migrations | ||
models | ||
ot | ||
web | ||
workers | ||
csp.js | ||
history.js | ||
letter-avatars.js | ||
logger.js | ||
realtime.js | ||
response.js | ||
utils.js |