Contrib.social

Harden security of email validation REST service

Open on Drupal.org →
Created on 9 October 2023, about 1 year ago

Problem/Motivation

Many use cases will likely involve some type of front-end integration. Presently, if a site builder opts to allow anonymous access to the REST resource, it opens up a potential denial of service attack vector.

Proposed resolution

Implement a site builder controlled flood control mechanism using Drupal's core flood service.

User interface changes

A new configuration form for threshold and window.

📌 Task
Status

Fixed

Version

1.0

Component

Code

Created by

🇺🇸United States luke.leber Pennsylvania

Live updates comments and jobs are added and updated live.
Sign in to follow issues

Comments & Activities

contrib.social Blog FAQ Discussions
Production build 0.71.5 2024