From 6d2bb24b3772a7b839d6911c1e1fe27151d29bfa Mon Sep 17 00:00:00 2001 From: Inverle Date: Thu, 4 Dec 2025 20:10:20 +0100 Subject: Move unsafe autologin to an extension (#7958) Completes the following TODO https://github.com/FreshRSS/FreshRSS/issues/7923: https://github.com/FreshRSS/FreshRSS/blob/de624dc8ce63ec819c61216d9d44f828841c293e/app/Controllers/authController.php#L105 Extension PR: https://github.com/FreshRSS/Extensions/pull/364 https://github.com/FreshRSS/Extensions/tree/main/xExtension-UnsafeAutologin --- config.default.php | 5 ----- 1 file changed, 5 deletions(-) (limited to 'config.default.php') diff --git a/config.default.php b/config.default.php index 89b2cfd25..adb64a633 100644 --- a/config.default.php +++ b/config.default.php @@ -78,11 +78,6 @@ return [ # You need to set the user’s API password. 'api_enabled' => false, - # Allow or not the use of an unsafe login, - # by providing username and password in the login URL: - # https://example.net/FreshRSS/p/i/?c=auth&a=login&u=alice&p=1234 - 'unsafe_autologin_enabled' => false, - # By default, FreshRSS will display a warning to logged-in admin users if the CSP policy is insecure. # This setting can disable the warning. # For more information see: https://freshrss.github.io/FreshRSS/en/admins/10_ServerConfig.html#security -- cgit v1.2.3