hedgedoc/lib/web
Sheogorath d097211c54
Fix unauthenticated file uploads
This patch fixes the issue of unauthenticated users, being able to
upload files, even when anonymous edits are disabled.

It's implemented by blocking uploads when either `allowAnonymous` is set
to `false` for all unauthenticated users, unless `allowAnonymousEdits`
is set to true, to make sure anonymous editors still experience the full
feature set.

Signed-off-by: Christoph Kern <sheogorath@shivering-isles.com>
2020-12-27 19:51:01 +01:00
..
auth Fix crash when OAuth2 config parameters are missing 2020-11-30 15:04:30 +01:00
imageRouter Fix unauthenticated file uploads 2020-12-27 19:51:01 +01:00
middleware Replace CodiMD with HedgeDoc 2020-11-14 21:18:36 +01:00
note Remove pdf export code 2020-11-26 21:09:23 +01:00
baseRouter.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
historyRouter.js Fix eslint warnings 2019-05-31 00:30:29 +02:00
statusRouter.js Add config option for cookie SameSite policy 2020-08-27 02:04:49 +02:00
userRouter.js Move note actions to their own file. 2019-10-27 13:51:53 +01:00
utils.js Allow posting new note with content 2018-01-18 10:41:58 +01:00