Security
Well, we have many things to do here, for example
- permissions : ensure pad, group operations are only executed by people who have admin title for that
- check JSON requests, secure cookies, protection against common Web flaws
- filter Etherpad API for pads and groups ?
- ...
This issue will be split into several ones when started.