ghost

Infrastructure/ghost

Fork 0

mirror of https://github.com/TryGhost/Ghost.git synced 2025-02-03 23:00:14 -05:00

Commit graph

Author	SHA1	Message	Date
Katharina Irrgang	a2edc09762	🎨 optimisations for brute (#7867 ) closes #7766, refs #7579 - ensure we are using the correct brute keys - ensure we are using req.ip as Ghost is configured with trust proxy option - tidy up a little	2017-01-23 22:44:39 +01:00
David Wolfe	e2bbf7d206	Fix brute for token exchanges (#7725 ) closes #7722 - fixes issue where token exhanges are logged with an undefined email address causing lockouts - use more relevant translations for errors	2016-11-17 14:02:56 +01:00
David Wolfe	68af2145a1	Replace memory spam prevention with brute-express (#7579 ) no issue - removes count from user checks model - uses brute express brute with brute-knex adaptor to store persisted data on spam prevention - implement brute force protection for password/token exchange, password resets and private blogging	2016-11-08 12:33:19 +01:00

Author

SHA1

Message

Date

Katharina Irrgang

a2edc09762

🎨 optimisations for brute (#7867 )

closes #7766, refs #7579

- ensure we are using the correct brute keys
- ensure we are using req.ip as Ghost is configured  with trust proxy option
- tidy up a little

2017-01-23 22:44:39 +01:00

David Wolfe

e2bbf7d206

Fix brute for token exchanges (#7725 )

closes #7722

- fixes issue where token exhanges are logged with an undefined email address causing lockouts
- use more relevant translations for errors

2016-11-17 14:02:56 +01:00

David Wolfe

68af2145a1

Replace memory spam prevention with brute-express (#7579 )

no issue

- removes count from user checks model
- uses brute express brute with brute-knex adaptor to store persisted data on spam prevention
- implement brute force protection for password/token exchange, password resets and private blogging

2016-11-08 12:33:19 +01:00

3 commits