peter
9d3624d51b
Auth security round: SB3 (email tokens out of URL query → fragment), SA4 (server-side session revocation + 'Log out other sessions'), SA3 (trusted-proxy X-Forwarded-For so rate limits can't be bypassed via a forged header).
2 lines
7 B
Plaintext
2 lines
7 B
Plaintext
0.39.0
|