mirror of
https://github.com/nextcloud/server.git
synced 2026-07-13 03:27:55 -04:00
f9e274dfe3
When password reset links were disabled, the reset form did not rate-limit failed token attempts, leaving that endpoint open to unthrottled token guessing. Failed attempts on the form are now always throttled, consistent with the other reset steps. Signed-off-by: nfebe <fenn25.fn@gmail.com> |
||
|---|---|---|
| .. | ||
| apps | ||
| blueprints | ||
| Core | ||
| data | ||
| docker | ||
| lib | ||
| playwright | ||
| autoload.php | ||
| bootstrap.php | ||
| databases-all-config.php | ||
| enable_all.php | ||
| memcached.config.php | ||
| phpunit-autotest-external.xml | ||
| phpunit-autotest.xml | ||
| preseed-config.php | ||
| redis-cluster.config.php | ||
| redis.config.php | ||
| startsessionlistener.php | ||