niccokunzmann / open-web-calendar

Embed a highly customizable web calendar into your website using ICal source links
https://open-web-calendar.quelltext.eu
GNU General Public License v2.0
208 stars 66 forks source link

[security] Disallow file:// links #428

Closed niccokunzmann closed 2 months ago

niccokunzmann commented 3 months ago

in order to safely host the OWC, not just in docker but as native extension, we need to disallow file:// links or else you can spy on the server.


We're using Polar.sh so you can upvote and help fund this issue. We receive the funding once the issue is completed & confirmed by you. Thank you in advance for helping prioritize & fund our work.

Fund with Polar