mirror of
https://github.com/nextcloud/server.git
synced 2026-07-12 19:16:25 -04:00
f9e274dfe3
When password reset links were disabled, the reset form did not rate-limit failed token attempts, leaving that endpoint open to unthrottled token guessing. Failed attempts on the form are now always throttled, consistent with the other reset steps. Signed-off-by: nfebe <fenn25.fn@gmail.com> |
||
|---|---|---|
| .. | ||
| Command | ||
| Controller | ||
| Data | ||
| Listener | ||
| Middleware | ||
| Service | ||