b5350cccf7
Add rack-attack throttler for all logins
...
We have a built-in bruteforce protection for built-in users. When users
are being created from LDAP on-the-fly, these limits cannot apply, as we
do not have a user object yet.
Instead, we can provide a more generous throttler to block attempts
2026-05-29 12:33:28 +02:00
78ed9ea580
Freeze string literals in config
...
rubocop -A --only Style/FrozenStringLiteralComment,Layout/EmptyLineAfterMagicComment,Style/RedundantFreeze config
2025-08-19 17:04:00 +01:00
4911b8a149
remove years from copyrights (except for COPYRIGHT file)
2024-07-31 15:02:49 +02:00
3b2121f733
Revert "Merge remote-tracking branch 'origin/release/13.4' into dev"
...
This reverts commit 40b2bbeb09b4c6cb17cc
2024-03-21 11:31:17 +01:00
7787e457a3
Revert "Merge branch 'dev' into release/13.4"
...
This reverts commit a901541269e573ca00b7
2024-03-20 20:19:08 +01:00
9e4934cd0a
change quotes using rubocop --only Style/StringLiterals,Style/QuotedSymbols -a
2024-03-20 18:05:22 +01:00
6ac6553786
Fix rack-attack configuration
...
The set_defaults! clears the configuration and would remove the default blocklist
https://community.openproject.org/work_packages/53399
2024-03-13 12:16:58 +01:00
c795874f7f
Update copyright year for 2024
...
command used: `rg -l 'Copyright \(C\) 2012-202\d the OpenProject' | xargs -n 100 sed -i -r 's/Copyright \(C\) 2012-202. the OpenProject/Copyright (C) 2012-2024 the OpenProject/'`
2024-01-02 16:23:54 +01:00
c174414829
Move rate limiting from saas to core
2023-11-07 13:07:26 +01:00
6aba7c04f4
Update rack-attack.rb
2023-07-04 14:44:17 +02:00
cf88fcdac3
Apply rate limiting on lost password form
2023-07-03 21:13:08 +02:00
21a696ef9b
Update copyright information for 2023
2022-12-30 15:51:26 +01:00
bc8d423ec2
update copyright information for 2022
2022-03-01 17:05:59 +01:00
ccfa29c728
Move license and copyright docs to root, fix names and references
2021-09-02 21:50:46 +02:00
6140f4c7e9
update copyright to 2021 ( #8925 )
...
Updates the copyright to 2021 for all files that have a copyright. Files in our source code without the copyright header still do not receive one automatically. Additionally, backlisted files are also excluded.
Previously the copyright of chiliproject which references redmine stated a copyright of redmine up to and including 2017 which is not true for the code we have in here. Because of that I changed that to 2013
2021-01-13 17:47:45 +01:00
bd7f4e4814
Update copyright notice
2020-01-15 11:31:26 +01:00
6ef4211e77
Bump copyright to 2018 ( #6171 )
...
[ci skip]
2018-02-12 08:51:12 +01:00
a0ab4ddccc
Fix deprecation in rack-attack
2017-09-05 21:08:41 +02:00
7cf11bb689
Update copyright notice
2017-01-10 15:11:43 +01:00
2f40e69a29
Add/update Copyright headers in (Rails) config
...
Signed-off-by: Alex Coles <alex@alexbcoles.com >
2015-04-21 10:24:04 +02:00
bbcf34f020
Forbid access to blacklisted routes
2015-02-16 11:59:58 +02:00
Oliver Günther