You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Given a bug/feature that can be abused as an oracle if a user exists/doesn't exist, it should be possible to filter a list of usernames to those that actually exist on the system.
We would probably reuse the verify(user, password) function for this and provide nil as the password.
The text was updated successfully, but these errors were encountered:
Given a bug/feature that can be abused as an oracle if a user exists/doesn't exist, it should be possible to filter a list of usernames to those that actually exist on the system.
We would probably reuse the
verify(user, password)
function for this and providenil
as the password.The text was updated successfully, but these errors were encountered: