Dereku/snappymail
0
0
Fork 0
mirror of https://github.com/the-djmaze/snappymail.git synced 2026-11-01 09:58:49 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

Improved loginErrorDelay to prevent timing attacks

Browse source
This commit is contained in:
the-djmaze 2023-02-03 14:36:13 +01:00
parent c4df524a06
commit b859cd6aec
4 changed files with 9 additions and 13 deletions
Download patch file Download diff file Expand all files Collapse all files

2
snappymail/v/0.0.0/app/libraries/RainLoop/Config/Application.php
View file

@ -379,7 +379,7 @@ Enables caching in the system'),
'labs' => array(
'date_from_headers' => array(true, 'Display message RFC 2822 date and time header, instead of the arrival internal date.'),
'allow_message_append' => array(false),
'login_fault_delay' => array(1),
'login_fault_delay' => array(5, 'When login fails, wait N seconds before responding'),
'log_ajax_response_write_limit' => array(300),
'allow_html_editor_biti_buttons' => array(false),
'allow_ctrl_enter_on_compose' => array(true),