I host a peertube server, and while I am the server admin I don’t manage the peertube instance at all. I’d like to ensure that no unexpected code is run. Is it currently possible to disable the activation of plugins with an on-disk configuration option?
No it’s not possible. But I’m not sure to understand why this feature is problematic, since admins can already inject custom JS or CSS using the web interface.
My use case, is installing plugins uses yarn to install packages which could run server side code, where editing custom JS/CSS only runs on client side. I’ve found a way to disable plugins without a PR (via config.index.enabled option) This thread can be locked as resolved. Thanks