eval(security): prevention checks for username enumeration attack vector #17
Loading…
Add table
Add a link
Reference in a new issue
No description provided.
Delete branch "%!s()"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
https://www.controlgap.com/blog/how-to-protect-against-username-enumeration-from-forms
This issue tracks a proactive evaluation of username enumeration attack vector for the front end. as far as I know, there is no immediate reason to believe this is an issue, but I am opening this issue to explicitly explore the attack vector (research) and evaluation of the implementation.
When reporting back, please do both (a) research and (b) evaluation. Action items for improvement are appreciated.
Evaluated and in progress for the backend. Closing here as this is not a frontend related issue.