mirror of
https://github.com/maziggy/bambuddy.git
synced 2026-09-30 03:01:21 +02:00
The bug report endpoints (start-logging, stop-logging, submit) had no authentication, allowing anyone on the network to enable debug logging, retrieve sanitized system logs, and trigger bug report submissions when auth was enabled. All three now require permission when auth is enabled: start-logging requires settings:update, stop-logging and submit require settings:read. Endpoints remain open when auth is disabled (default).