diff options
| author |  Alexandre Alapetite <alexandre@alapetite.fr>
| 2021-01-17 19:57:39 +0100 |
|---|---|---|
| committer |  GitHub <noreply@github.com>
| 2021-01-17 19:57:39 +0100 |
| commit | 2981714f1506fab937d037857e698fb61e1e2b49 (patch) | |
| tree | 1d185d3d8512fa8c8f0c97967ddbf63937c71226 /p/api/greader.php | |
| parent | 180ca4d1683a5a8a17eae75dc54204ae74d3bdfe (diff) | |
Fix form login if user does not exist (#3377)
Small bug from https://github.com/FreshRSS/FreshRSS/pull/3070 , leading
to an exception due to not being able to log the error.
Minor: Also add some very primitive mitigation of timing attacks (to
find out whether a user exists or not, although I have not checked
whether this might be guessed through other means) - before, if the user
did not exist, the response was always measurably faster; now it is
harder to tell due to the noise
Diffstat (limited to 'p/api/greader.php')
0 files changed, 0 insertions, 0 deletions