diff options
| author | zotlabs <mike@macgirvin.com> | 2018-06-13 20:27:10 -0700 |
|---|---|---|
| committer | zotlabs <mike@macgirvin.com> | 2018-06-13 20:27:10 -0700 |
| commit | b5e4a5f51c478d646248c5a9eb22907cda32dd3e (patch) | |
| tree | b4ecb976146066ed4d93a1959695ad064b317331 /Zotlabs/Module/Admin/Security.php | |
| parent | 65cbc7c2bba523a2663a89fae29b5cef162fd0a1 (diff) | |
| download | volse-hubzilla-b5e4a5f51c478d646248c5a9eb22907cda32dd3e.tar.gz volse-hubzilla-b5e4a5f51c478d646248c5a9eb22907cda32dd3e.tar.bz2 volse-hubzilla-b5e4a5f51c478d646248c5a9eb22907cda32dd3e.zip | |
SECURITY: provide option to disable the cloud 'root' directory and make the cloud module require a target channel nickname. This is a low impact change as there is currently no disclosure of private information. The presence of a file browser for all the channels on the site could be (and is reported to be) a concern to some people and there is no reason why it shouldn't be optional.
Diffstat (limited to 'Zotlabs/Module/Admin/Security.php')
| -rw-r--r-- | Zotlabs/Module/Admin/Security.php | 5 |
1 files changed, 5 insertions, 0 deletions
diff --git a/Zotlabs/Module/Admin/Security.php b/Zotlabs/Module/Admin/Security.php index 49e1ccf42..249fda469 100644 --- a/Zotlabs/Module/Admin/Security.php +++ b/Zotlabs/Module/Admin/Security.php @@ -16,6 +16,10 @@ class Security { $block_public = ((x($_POST,'block_public')) ? True : False); set_config('system','block_public',$block_public); + + $cloud_noroot = ((x($_POST,'cloud_noroot')) ? 1 : 0); + set_config('system','cloud_disable_siteroot',1 - $cloud_noroot); + $ws = $this->trim_array_elems(explode("\n",$_POST['whitelisted_sites'])); set_config('system','whitelisted_sites',$ws); @@ -87,6 +91,7 @@ class Security { '$page' => t('Security'), '$form_security_token' => get_form_security_token('admin_security'), '$block_public' => array('block_public', t("Block public"), get_config('system','block_public'), t("Check to block public access to all otherwise public personal pages on this site unless you are currently authenticated.")), + '$cloud_noroot' => [ 'cloud_noroot', t('Provide a cloud root directory'), 1 - intval(get_config('system','cloud_disable_siteroot')), t('The cloud root directory lists all channel names which provide public files') ], '$transport_security' => array('transport_security', t('Set "Transport Security" HTTP header'),intval(get_config('system','transport_security_header')),''), '$content_security' => array('content_security', t('Set "Content Security Policy" HTTP header'),intval(get_config('system','content_security_policy')),''), '$allowed_email' => array('allowed_email', t("Allowed email domains"), get_config('system','allowed_email'), t("Comma separated list of domains which are allowed in email addresses for registrations to this site. Wildcards are accepted. Empty to allow any domains")), |