Work in progress on securing reports.

lib/tools.js

@@ -1,5 +1,6 @@
 'use strict';
 
+const config = require('config');
 let fs = require('fs');
 let path = require('path');
 let db = require('./db');
@@ -28,7 +29,6 @@ module.exports = {
     prepareHtml,
     purifyHTML,
     mergeTemplateIntoLayout,
-    nameToFileName,
     workers: new Set()
 };
 
@@ -130,11 +130,15 @@ function updateMenu(res) {
         title: _('Automation'),
         url: '/triggers',
         key: 'triggers'
-    }, {
-        title: _('Reports'),
-        url: '/reports',
-        key: 'reports'
     });
+
+    if (config.reports && config.reports.enabled === true) {
+        res.locals.menu.push({
+            title: _('Reports'),
+            url: '/reports',
+            key: 'reports'
+        });
+    }
 }
 
 function validateEmail(address, checkBlocked, callback) {
@@ -302,11 +306,3 @@ function mergeTemplateIntoLayout(template, layout, callback) {
     }
 }
 
-function nameToFileName(name) {
-    return name.
-    trim().
-    toLowerCase().
-    replace(/[ .+/]/g, '-').
-    replace(/[^a-z0-9\-_]/gi, '').
-    replace(/--*/g, '-');
-}