mirror of
https://code.castopod.org/adaures/castopod.git
synced 2024-09-08 03:39:20 +02:00
docs(security): add disclaimer aside to third-party plugins section
This commit is contained in:
parent
7405f8897d
commit
53232d3b61
@ -2,6 +2,8 @@
|
||||
title: Security concerns
|
||||
---
|
||||
|
||||
import { Aside } from "@astrojs/starlight/components";
|
||||
|
||||
Castopod is built on top of [CodeIgniter4](https://codeigniter.com/), a PHP
|
||||
framework that encourages
|
||||
[good security practices](https://codeigniter.com/user_guide/concepts/security.html).
|
||||
@ -25,6 +27,12 @@ sudo chown -R www-data:www-data /path/to/castopod/public/media
|
||||
|
||||
## Third-party Plugins
|
||||
|
||||
<Aside type="caution" title="Disclaimer">
|
||||
Installing untrusted third-party plugins on Castopod carries inherent security
|
||||
risks, such as unauthorized access to sensitive user data, data breaches, data
|
||||
tampering, and injecting malicious code.
|
||||
</Aside>
|
||||
|
||||
Since v2's [Plugins Architecture](../../plugins), Castopod can be extended with
|
||||
all sorts of cool features. Anyone can choose to create their own plugins and
|
||||
even share them with the community.
|
||||
|
Loading…
Reference in New Issue
Block a user