##// END OF EJS Templates
security: limit the maximum password lenght to 72 characters to prevent possible...
security: limit the maximum password lenght to 72 characters to prevent possible server side resource consumption attack. - bcrypt heavy computation can lead to DOS using a very long password .eg 10**8 lenght. - we allowed this on registration or on password update

File last commit:

r1517:02d18047 default
r2128:f22a9ea9 default
Show More
.coveragerc
20 lines | 287 B | text/plain | TextLexer
[run]
branch = True
include =
rhodecode/lib/*
rhodecode/model/*
rhodecode/controllers/*
omit =
rhodecode/lib/vcs/remote/*
rhodecode/lib/dbmigrate/*
rhodecode/lib/paster_commands/*
rhodecode/tests/*
[report]
exclude_lines =
raise NotImplementedError