search

IsaacSteadman / PassManJs

Online Password Manager
https://passman.isaacsteadman.com/?server_ns=simple&server_pass=simple
1 stars 1 forks source link

SECURITY: possible account creation overload #5

Closed IsaacSteadman closed 5 years ago

IsaacSteadman commented 5 years ago

There is a security bug that would allow users to overload the server with too many new accounts which would fill up the file system.

Potential solutions include CAPTCHA and/or email verification.

IsaacSteadman commented 5 years ago

another possible solution is to create namespaces so that a different server access password is used for each namespace as specified in the query string of the client

IsaacSteadman commented 5 years ago

this was fixed in the recent change that added server namespaces and separate policies