Files
TijdVoorDeTest/config
Marijn 89e7dd09ba Add rate limiting to login and season-code entry points
Neither /login nor the public season-code guess form (POST /) had
any throttling, making both an unlimited brute-force/enumeration
oracle. Adds symfony/rate-limiter and enables login_throttling on
the main firewall, plus a dedicated per-IP rate limiter on the
season-code form.
2026-07-13 09:56:39 +02:00
..
2025-10-03 22:37:45 +02:00
2026-02-18 16:20:14 +01:00
2026-02-18 16:20:14 +01:00