HackMD/lib/web
Sheogorath 70df29790a
Add token based security feature
In the current setup users could be tricked into deleting their data by
providing a malicious link like `[click me](/me/delete)`. This commit
prevents such an easy attack and need the user's deleteToken to get his
data deleted. In case someone requests his deletion by email you can
also ask him for this token.

We can add a GUI that shows it later on.

Signed-off-by: Sheogorath <sheogorath@shivering-isles.com>
2018-05-25 18:26:06 +02:00
..
auth Fix typo of "grouptAttribute" in saml auth module 2018-04-27 21:52:05 +08:00
imageRouter Change config to camel case with backwards compatibility 2018-03-25 19:08:14 +02:00
middleware Change config to camel case with backwards compatibility 2018-03-25 19:08:14 +02:00
baseRouter.js refactor(baseRouter.js): Adjust style fit standard 2017-05-08 19:29:06 +08:00
historyRouter.js refactor: Remove require extension filename 2017-05-08 19:29:06 +08:00
noteRouter.js Allow posting new note with content 2018-01-18 10:41:58 +01:00
statusRouter.js Change config to camel case with backwards compatibility 2018-03-25 19:08:14 +02:00
userRouter.js Add token based security feature 2018-05-25 18:26:06 +02:00
utils.js Allow posting new note with content 2018-01-18 10:41:58 +01:00