docs: update deployment paths and bump version

- add deployment paths table to README - update installation notes to reference deployment paths - bump version to 1.1.5 - update nextcloud dependency range (33-35) - update author homepage and remove email - remove --prefer-dist flag in ci.yml - delete img/app (copy).svg
2026-06-14 22:07:34 -07:00
parent df930de6cd
commit 5f703e0fa9
6 changed files with 26 additions and 118 deletions
@@ -242,6 +242,7 @@ document.addEventListener('DOMContentLoaded', function () {
                authTokensState[roomToken] = [];
            }
            // Use URL-safe base64 (no +, /, = characters)
+            // TODO: Switch to server-side token generation for higher security (client-side Math.random() is not cryptographically secure)
            var raw = Math.random().toString(36).substring(2) + Date.now().toString(36);
            var token = btoa(raw).replace(/\+/g, '-').replace(/\//g, '_').replace(/=/g, '');
            authTokensState[roomToken].push(token);