summaryrefslogtreecommitdiff
path: root/config.default.php
diff options
context:
space:
mode:
authorFrédéric Guillot <fred@kanboard.net>2019-01-30 21:34:04 -0800
committerFrédéric Guillot <fred@kanboard.net>2019-01-30 21:34:04 -0800
commit8cf8f9ef078b31473e9edcb4b9a61a80e3152c0c (patch)
tree5e5933780300d992bf43c1456ee622f979e915bf /config.default.php
parenta1c437bce825d90011750199fbcc0ca08ada51b3 (diff)
Disable by default plugin installer
- There is no code review or any approval process to submit a plugin. - Anyone can submit a backdoor as plugin. - This is up to the Kanboard instance owner to validate if a plugin is legit.
Diffstat (limited to 'config.default.php')
-rw-r--r--config.default.php4
1 files changed, 2 insertions, 2 deletions
diff --git a/config.default.php b/config.default.php
index 59a1f346..d845b277 100644
--- a/config.default.php
+++ b/config.default.php
@@ -24,8 +24,8 @@ define('PLUGINS_DIR', __DIR__.DIRECTORY_SEPARATOR.'plugins');
// Plugins directory URL
define('PLUGIN_API_URL', 'https://kanboard.org/plugins.json');
-// Enable/Disable plugin installer
-define('PLUGIN_INSTALLER', true);
+// Enable/Disable plugin installer (Disabled by default for security reason)
+define('PLUGIN_INSTALLER', false);
// Available cache drivers are "file" and "memory"
define('CACHE_DRIVER', 'memory');