fix(security): Mark recording_servers key appconfig as private as it contains a secret

Signed-off-by: Joas Schilling <coding@schilljs.com>

diff --git a/lib/private/AppConfig.php b/lib/private/AppConfig.php
index cd93c4f42c4f1138842a2e0e0756c104cd233de5..96fa6bf74672110724a382a2852b88466f50d96e 100644 (file)
--- a/lib/private/AppConfig.php
+++ b/lib/private/AppConfig.php
@@ -112,6 +112,7 @@ class AppConfig implements IAppConfig {
                'spreed' => [
                        '/^bridge_bot_password$/',
                        '/^hosted-signaling-server-(.*)$/',
+                       '/^recording_servers$/',
                        '/^signaling_servers$/',
                        '/^signaling_ticket_secret$/',
                        '/^signaling_token_privkey_(.*)$/',