##// END OF EJS Templates
security: limit the maximum password lenght to 72 characters to prevent possible...
security: limit the maximum password lenght to 72 characters to prevent possible server side resource consumption attack. - bcrypt heavy computation can lead to DOS using a very long password .eg 10**8 lenght. - we allowed this on registration or on password update
ergo -
r2128:f22a9ea9 default
Show More
Name Size Modified Last Commit Author
/ docs / contributing
testing
api.rst Loading ...
checklist-pull-request.rst Loading ...
checklist-tickets.rst Loading ...
contributing.rst Loading ...
db-schema.rst Loading ...
dependencies.rst Loading ...
dev-settings.rst Loading ...
dev-setup.rst Loading ...
frontend.rst Loading ...
overview.rst Loading ...
standards.rst Loading ...