[FEATURE_REQUEST] Disallow displaying config

[mfnalex]

Is your feature request related to a problem? If so, please describe.

No response

Describe the solution you'd like

Hi, I'd like to have an option to disallow viewing the yaml config from the browser. Although it doesn't contain any sensitive information, I don't like the idea of people just being able to see and download it.

Priority

Low (Nice-to-have)

Is this something you would be keen to implement

Maybe

[Lissy93]

Definitely possible, just something to keep in mind: If you don't have any auth, then even if the config is hidden then it will still be able to be viewed through the dev tools, since it's required for rendering the data.

I will add this to the todo list :)

---

In the meantime, if anyone would like to pick this up, here's some info as a starting point:

First add a new item to the config (e.g. appConfig.disableViewConfig) - here's a guide.
Then add v-if="!appConfig.disableViewConfig" to the view config buttons (in ExportConfigMenu.vue and ConfigContainer.vue). Finally, just check it works as expected.

[Lissy93]

I've implemented this in #488 (released in V2.0.3) - Set appConfig.disableConfiguration: true to try it out :)
With this option set, the user also won't be able to make any changes to the config.

But remember, that digging through the dev tools, the user will still be able to see any part of the config that is rendered anywhere on the page. So if you've got anything sensitive there, then make sure your dashboard is adequately secured with authentication/ behind a firewall

[mfnalex]

Thanks :) As said, there's nothing sensitive, I just felt it was a bit wrong to show it to users who don't have a way of changing it anyway! Seeing it in dev tools is no problem at all! :)