Onlyoffice Version: 8.3
OnlyOffice plugins are synchronized across all customers in a shared OnlyOffice environment, including their configurations. This means that any authorized user could potentially install arbitrary, malicious plugins that might leak confidential data or steal sensitive configurations.
If we use an LLM and want to make our configuration available to all users, how can we ensure that an arbitrary user cannot modify or delete our configuration?
