Add WebDAV support to backups

[ElijahPepe]

Relevant issue: #5273
Tested in browser: Firefox 90.0.1/99.0.1

[benmcgarry]

Thanks for the PR!

We are having some discussions on this among the team due to the concern of storing plaintext WebDAV credentials in file store in RES. Please stand by.

[ElijahPepe]

Passwords for accounts are stored in plaintext.

[benmcgarry]

Reddit account passwords are a lot less risk compared to someones file storage.

[ElijahPepe]

Very fair argument. Storing passwords in localStorage or the web SQL database API is obviously not feasible; any in-browser solutions are crackable.

The two ideas I have are to leave it as it is with a strong warning, or use OAuth and have the WebDAV connection work in the backend. There is a credential management API that could theoretically work, but it would require a lot more work than the other two solutions.

[benmcgarry]

Yeah I think having a strong warning might be the approach we want to go with. We have it in our privacy policy that we do store in plain text (https://redditenhancementsuite.com/privacy). But for this make it explicitly clear to say "Hey, these are the risks. Proceed with caution". Looking to see if we have a way we can flag a popup on user select to act as the warning.

[ElijahPepe]

Looking to see if we have a way we can flag a popup on user select to act as the warning.

I added a commit to trigger a window.alert() using onChange(). Hopefully that works.

[ShadowJonathan]