etherpad-lite/src/node/hooks/express
John McLear 66df0a572f
Security: FEATURE REMOVAL: Remove all plain text password logic and ui (#4178)
This will be a breaking change for some people.  

We removed all internal password control logic.  If this affects you, you have two options:

1. Use a plugin for authentication and use session based pad access (recommended).
1. Use a plugin for password setting.

The reasoning for removing this feature is to reduce the overall security footprint of Etherpad.  It is unnecessary and cumbersome to keep this feature and with the thousands of available authentication methods available in the world our focus should be on supporting those and allowing more granual access based on their implementations (instead of half assed baking our own).
2020-10-07 13:43:54 +01:00
..
admin.js redirect /admin properly (fix #3114) 2017-01-06 18:19:38 +01:00
adminplugins.js plugins: Move plugin definitions to avoid monkey patching 2020-09-08 00:50:24 +01:00
adminsettings.js Refactor startup/shutdown for tests 2020-09-22 11:07:21 +01:00
apicalls.js openapi: upgrade to openapi-backend 2.4.0 2020-04-03 01:03:11 +02:00
errorhandling.js Refactor startup/shutdown for tests 2020-09-22 11:07:21 +01:00
importexport.js Security: FEATURE REMOVAL: Remove all plain text password logic and ui (#4178) 2020-10-07 13:43:54 +01:00
isValidJSONPName.js Added a jsonp var checker 2018-03-23 11:17:39 +00:00
openapi.js Security: FEATURE REMOVAL: Remove all plain text password logic and ui (#4178) 2020-10-07 13:43:54 +01:00
padreadonly.js express/padreadonly.js: missing "let" 2019-03-27 18:29:12 +01:00
padurlsanitize.js padurlsanitize.js: invert a condition prior to refactoring 2019-02-09 00:05:21 +01:00
socketio.js socketio: Mimic what Express does to get client IP address 2020-10-07 10:40:37 +01:00
specialpages.js security: Enable authorize plugins to grant read-only access 2020-09-27 22:55:49 +01:00
static.js plugins: Move plugin definitions to avoid monkey patching 2020-09-08 00:50:24 +01:00
tests.js Bugfix / tests: Specs list type (#4169) 2020-07-15 17:37:03 +01:00
webaccess.js webaccess: Fix pad ID extraction for import and export paths 2020-10-05 18:48:16 +01:00