summaryrefslogtreecommitdiff
path: root/lib/web/userRouter.js (follow)
Commit message (Collapse)AuthorAgeFilesLines
* Prevent subdirectories in user exportDaan Sprenkels2018-11-281-9/+11
| | | | | | | | | This commit also refactors the code a bit, and adds a '-' separator between a filename and its duplicate index. This commit fixes #1079. Signed-off-by: Daan Sprenkels <hello@dsprenkels.com>
* Add note export functionSheogorath2018-05-261-0/+56
| | | | | | | | This function is the first step to get out data following GDPR about the transportability of data. Details: https://gdpr-info.eu/art-20-gdpr/ Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add token based security featureSheogorath2018-05-251-8/+12
| | | | | | | | | | | | In the current setup users could be tricked into deleting their data by providing a malicious link like `[click me](/me/delete)`. This commit prevents such an easy attack and need the user's deleteToken to get his data deleted. In case someone requests his deletion by email you can also ask him for this token. We can add a GUI that shows it later on. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Add delete function for authenticated usersSheogorath2018-05-251-0/+24
| | | | | | | Allow users to delete themselbes. This is require to be GDPR compliant. See: https://gdpr-info.eu/art-17-gdpr/ Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* Move letter-avatars into own requestSheogorath2018-04-171-0/+7
| | | | | | | | | | To prevent further weakening of our CSP policies, moving the Avatars into a non-inline version is the way to go. This implementation probably needs some beautification. But already fixes the bug. Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
* refactor(app.js): Extract /me pageBoHong Li2017-05-081-0/+36
generated by cgit v1.2.3 (git 2.25.1) at 2024-11-10 02:34:30 +0000