From 5fbd4914cac886380fbe6c27b184f28e77987480 Mon Sep 17 00:00:00 2001 From: stratself Date: Fri, 11 Sep 2026 06:06:04 +0000 Subject: [PATCH] fix: Disable unauthenticated media by default --- conduwuit-example.toml | 5 ++--- src/core/config/mod.rs | 7 +++---- 2 files changed, 5 insertions(+), 7 deletions(-) diff --git a/conduwuit-example.toml b/conduwuit-example.toml index 2f67e041c..f2bd19aab 100644 --- a/conduwuit-example.toml +++ b/conduwuit-example.toml @@ -1495,10 +1495,9 @@ # # The authenticated equivalent endpoints are always enabled. # -# Defaults to true for now, but this is highly subject to change, likely -# in the next release. +# Defaults to false, as unauthenticated media has been sunsetted. # -#allow_legacy_media = true +#allow_legacy_media = false # If set to true, prevents fetching new legacy remote media. # diff --git a/src/core/config/mod.rs b/src/core/config/mod.rs index 419008e09..bf048a526 100644 --- a/src/core/config/mod.rs +++ b/src/core/config/mod.rs @@ -1758,11 +1758,10 @@ pub struct Config { /// /// The authenticated equivalent endpoints are always enabled. /// - /// Defaults to true for now, but this is highly subject to change, likely - /// in the next release. + /// Defaults to false, as unauthenticated media has been sunsetted. /// - /// default: true - #[serde(default = "true_fn")] + /// default: false + #[serde(default)] pub allow_legacy_media: bool, /// If set to true, prevents fetching new legacy remote media.