Don't change Devise config from a model instance

phatworx / devise_security_extension

An enterprise security extension for devise, trying to meet industrial standard security demands for web applications.

MIT License

747 stars 346 forks source link

Don't change Devise config from a model instance #218

Open joelvh opened 7 years ago

joelvh commented 7 years ago

Global settings shouldn't change based on doing something with a model instance. Also be consistent in the variable referenced for maximum old passwords because that method may be overridden in the model.