Add warning about new default to HELPDESK_ENABLE_ATTACHEMENTS

This commit is contained in:
Georg Lehner 2024-06-06 16:55:53 +02:00
parent 2d5c350f00
commit d3553d9335

View File

@ -62,6 +62,12 @@ Settings related to attachments:
attachments which are then attached to the ticket. Also enables the attachments which are then attached to the ticket. Also enables the
``HELPDESK_ALWAYS_SAVE_INCOMING_EMAIL_MESSAGE`` setting. ``HELPDESK_ALWAYS_SAVE_INCOMING_EMAIL_MESSAGE`` setting.
**Caution**: Until version 1.2.0 attachments were enabled by
default. Since uploaded files by default are published without access
control this can lead to unintended exposure of sensitive
data. The default is now to disable attachments by default. Only
enable attachments if you have secured access to them.
- **HELPDESK_VALID_EXTENSIONS** Valid extensions for file types that can be attached to tickets. Note: This used to be called **VALID_EXTENSIONS** which is now deprecated. - **HELPDESK_VALID_EXTENSIONS** Valid extensions for file types that can be attached to tickets. Note: This used to be called **VALID_EXTENSIONS** which is now deprecated.
**Default:** ``HELPDESK_VALID_EXTENSIONS = ['.txt', '.asc', '.htm', '.html', '.pdf', '.doc', '.docx', '.odt', '.jpg', '.png', '.eml']`` **Default:** ``HELPDESK_VALID_EXTENSIONS = ['.txt', '.asc', '.htm', '.html', '.pdf', '.doc', '.docx', '.odt', '.jpg', '.png', '.eml']``