YunoHost-Apps/element_ynh
1
0
Fork 0
mirror of https://github.com/YunoHost-Apps/element_ynh.git synced 2024-09-03 18:36:08 +02:00
Code Issues Activity Actions

fix

Browse source
This commit is contained in:
ericgaspar 2023-02-15 07:39:25 +01:00
parent 9d4a923e1c
commit ec68d12bfe
3 changed files with 10 additions and 5 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

5
doc/ADMIN.md Normal file
View file

@ -0,0 +1,5 @@
Important Security Note
We do not recommend running Element from the same domain name as your Matrix homeserver (Synapse). The reason is the risk of XSS (cross-site-scripting) vulnerabilities that could occur if someone caused Element to load and render malicious user generated content from a Matrix API which then had trusted access to Element (or other apps) due to sharing the same domain.
We have put some coarse mitigations into place to try to protect against this situation, but it's still not good practice to do it in the first place. See vector-im/element-web#1977 for more details.

0
doc/ADMIN_fr.md Normal file
View file

10
scripts/upgrade
View file

@ -40,7 +40,7 @@ then
ynh_script_progression --message="Upgrading source files..." --weight=1
# Download, check integrity, uncompress and patch the source from app.src
ynh_setup_source --dest_dir="$install_dir" #--keep="config.json"
ynh_setup_source --dest_dir="$install_dir" --keep="config.json"
fi
# Set permissions to app files
@ -50,12 +50,12 @@ chown -R $app:www-data "$install_dir"
#=================================================
# ADD A CONFIGURATION
#=================================================
ynh_script_progression --message="Adding a configuration file..." --weight=1
#ynh_script_progression --message="Adding a configuration file..." --weight=1
ynh_add_config --template="../conf/config.json" --destination="$install_dir/config.json"
#ynh_add_config --template="../conf/config.json" --destination="$install_dir/config.json"
chmod 400 "$install_dir/config.json"
chown $app:$app "$install_dir/config.json"
#chmod 400 "$install_dir/config.json"
#chown $app:$app "$install_dir/config.json"
#=================================================
# NGINX CONFIGURATION