extern/django-helpdesk
1
0
Fork 1
mirror of https://github.com/django-helpdesk/django-helpdesk.git synced 2024-12-04 14:03:51 +01:00
Code Issues Packages Projects Releases Wiki Activity

Add warning about new default to HELPDESK_ENABLE_ATTACHEMENTS

Browse Source
This commit is contained in:
Georg Lehner 2024-06-06 16:55:53 +02:00
parent 2d5c350f00
commit d3553d9335
1 changed files with 6 additions and 0 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
docs/settings.rst
View File

@ -61,6 +61,12 @@ Settings related to attachments:
attached to tickets and followups, and emails are searched for
attachments which are then attached to the ticket. Also enables the
``HELPDESK_ALWAYS_SAVE_INCOMING_EMAIL_MESSAGE`` setting.
**Caution**: Until version 1.2.0 attachments were enabled by
default. Since uploaded files by default are published without access
control this can lead to unintended exposure of sensitive
data. The default is now to disable attachments by default. Only
enable attachments if you have secured access to them.
- **HELPDESK_VALID_EXTENSIONS** Valid extensions for file types that can be attached to tickets. Note: This used to be called **VALID_EXTENSIONS** which is now deprecated.