Files
TijdVoorDeTest/config/packages
Marijn 89e7dd09ba Add rate limiting to login and season-code entry points
Neither /login nor the public season-code guess form (POST /) had
any throttling, making both an unlimited brute-force/enumeration
oracle. Adds symfony/rate-limiter and enables login_throttling on
the main firewall, plus a dedicated per-IP rate limiter on the
season-code form.
2026-07-13 09:56:39 +02:00
..
2025-09-28 18:14:58 +02:00
2026-03-22 22:40:25 +01:00
2025-06-07 22:24:38 +02:00
2026-02-18 16:20:14 +01:00
2025-09-28 18:14:58 +02:00
2025-09-28 18:14:58 +02:00