Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Fix paranoid-mode being ignored #138

Merged
merged 2 commits into from Jan 7, 2019
Merged

Fix paranoid-mode being ignored #138

merged 2 commits into from Jan 7, 2019

Commits on Nov 29, 2018

  1. Fix paranoid-mode being ignored 

    Devise's paranoid-mode is meant to hide when a record with an e-mail exists in the system, by always showing the invalid error message instead of conditionally revealing when a record is not found. This gem ignores the setting and reveals existing accounts during an enumeration attack.
    @Gargron
    Gargron committed Nov 29, 2018
    Copy the full SHA
    3b1d918 View commit details
    Browse the repository at this point in the history

  2. Fix paranoid-mode being ignored

    @Gargron
    Gargron committed Nov 29, 2018
    Copy the full SHA
    e045c47 View commit details
    Browse the repository at this point in the history