security(auth): obfuscate registration errors #163
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Sign ups need to be obfuscated as to prevent CWE-204: Observable Response Discrepancy.
Closing this in favor of a rate limiter implementation, as obfuscating creates an implementation issue (how to display conflict in the legitimate case someone forgot they already had an account?).