Files
rest-server/changelog/0.10.0_2020-09-13/issue-60
2020-09-13 11:24:26 +02:00

9 lines
381 B
Plaintext

Security: Require auth by default, add --no-auth flag
In order to prevent users from accidentally exposing rest-server without
authentication, rest-server now defaults to requiring a .htpasswd. If you want
to disable authentication, you need to explicitly pass the new --no-auth flag.
https://github.com/restic/rest-server/issues/60
https://github.com/restic/rest-server/pull/61