##// END OF EJS Templates
security: limit the maximum password lenght to 72 characters to prevent possible...
security: limit the maximum password lenght to 72 characters to prevent possible server side resource consumption attack. - bcrypt heavy computation can lead to DOS using a very long password .eg 10**8 lenght. - we allowed this on registration or on password update

File last commit:

r2025:0ae30cda default
r2128:f22a9ea9 default
Show More
.bumpversion.cfg
6 lines | 145 B | text/x-ini | IniLexer
[bumpversion]
current_version = 4.10.0
message = release: Bump version {current_version} to {new_version}
[bumpversion:file:rhodecode/VERSION]