matty/peertube-plugin-livechat
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Temporary security fix for #332: rollback of v8.3.1:

Browse Source 
* Setting video owner as room owner as side effects. Like leaking the instance moderator/admin list. And maybe others.
  * So we rollback this feature, waiting for a better way to allow room admins/moderators to change room settings.
  * As a consequence, users that are not Peertube moderator/administrator can't change the slow mode configuration without deleting/recreating the room. This will be fixed in a later plugin version.
This commit is contained in:
John Livingston
2024-03-01 15:25:29 +01:00
parent 97b85be4ad
commit f5b9ffe616
38 changed files with 254 additions and 131 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
CHANGELOG.md
View File

@ -2,6 +2,10 @@
## ??? (Not Released Yet)
* Temporary security fix for #332: rollback of v8.3.1:
* Setting video owner as room owner as side effects. Like leaking the instance moderator/admin list. And maybe others.
* So we rollback this feature, waiting for a better way to allow room admins/moderators to change room settings.
* As a consequence, users that are not Peertube moderator/administrator can't change the slow mode configuration without deleting/recreating the room. This will be fixed in a later plugin version.
* Fix mod_muc_slow_mode: add min value for slow_mode_duration field.
* Debug Mode: new option to promote some JIDs as admins on the MUC component.
* Fix #322: "Sepia is no longer an owner of this groupchat" message when joining the chat.