Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

draft: 修复忘记密码,用户名爆破安全漏洞 #1846

Open
wants to merge 1 commit into
base: release/2.5.3
Choose a base branch
from

Conversation

neronkl
Copy link
Collaborator

@neronkl neronkl commented Jul 18, 2024

Description

bugfix: 修复忘记密码,用户名爆破安全漏洞
Fixes # (issue)

Checklist

  • 填写 PR 描述及相关 issue (write PR description and related issue)
  • 代码风格检查通过 (code style check passed)
  • PR 中包含单元测试 (include unit test)
  • 单元测试通过 (unit test passed)
  • 本地开发联调环境验证通过 (local development environment verification passed)


return Response(PasswordResetSendSMSOutputSLZ(response_data).data)
return Response()
Copy link
Collaborator Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

一些针对input_telephone的校验异常接口返回,是否也直接返回200。和邮件发送一样,保留校验异常的日志,返回200

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant