• Zot's avatar
    code_allowed is a real mess. Start the cleanup by remving the account level... · 58aa0f3e
    Zot authored
    code_allowed is a real mess. Start the cleanup by remving the account level code allow and limiting to specific channels only. This reduces the possibility of cross channel security issues coming into play. Then provide a single function for checking the code permission. This is only partially done as we often need to check against the observer or logged in channel as well as the resource owner to ensure that this only returns true for local channels which also own the requested resource.
    58aa0f3e
Name
Last commit
Last update
..
about Loading commit data...
admin Loading commit data...
api Loading commit data...
ca Loading commit data...
context Loading commit data...
database Loading commit data...
de Loading commit data...
developer Loading commit data...
feature Loading commit data...
fr Loading commit data...
hook Loading commit data...
macros Loading commit data...
member Loading commit data...
nb-no Loading commit data...
nl Loading commit data...
schemaspy_hubzilla Loading commit data...
sv Loading commit data...
tutorials Loading commit data...
AdvancedSearch.md Loading commit data...
Comparison-of-activity-stream-networks.md Loading commit data...
Creating-Templates.md Loading commit data...
DerivedTheme1.md Loading commit data...
Developers.md Loading commit data...
Features.md Loading commit data...
Hubzilla_on_OpenShift.bb Loading commit data...
Plugins.md Loading commit data...
Primary-Directory.md Loading commit data...
README.md Loading commit data...
Remove-Account.md Loading commit data...
Schema-development.md Loading commit data...
TermsOfService.md Loading commit data...
Translations.md Loading commit data...
Widgets.md Loading commit data...
Zot---A-High-Level-Overview.md Loading commit data...
accounts_profiles_channels_basics.bb Loading commit data...
acl_dialog_post.html Loading commit data...
addons.bb Loading commit data...
addons_gnusocial.bb Loading commit data...
admins.bb Loading commit data...
bugs.bb Loading commit data...
campaign.bb Loading commit data...
checking_account_quota_usage.bb Loading commit data...
comanche.bb Loading commit data...
database.bb Loading commit data...
dev-function-overview.md Loading commit data...
dev_beginner.bb Loading commit data...
develop.bb Loading commit data...
developer_function_primer.bb Loading commit data...
developers.bb Loading commit data...
diaspora_compat.bb Loading commit data...
directories.bb Loading commit data...
doco.bb Loading commit data...
encryption.bb Loading commit data...
external-resource-links.bb Loading commit data...
extra_features.bb Loading commit data...
faq_admins.bb Loading commit data...
federate.bb Loading commit data...
filesync.md Loading commit data...
first-post.bb Loading commit data...
general.bb Loading commit data...
git_for_non_developers.bb Loading commit data...
hidden_configs.bb Loading commit data...
hooklist.bb Loading commit data...
hooks.html Loading commit data...
intro_for_developers.bb Loading commit data...
plugins.bb Loading commit data...
problems-following-an-update.bb Loading commit data...
red2pi.bb Loading commit data...
roadmap.bb Loading commit data...
roadmap_hz3.md Loading commit data...
roadmapv4.bb Loading commit data...
schema_development.bb Loading commit data...
sql_conventions.bb Loading commit data...
toc.html Loading commit data...