password security

[flesti]

Can the password url be protected against brute force attacks ? Like time gating the attempts or limited tries etc

[Zingzy]

Hello @flesti yes, I think that might be a vulnerability, thanks for pointing out... One step for fixing this would be to rate-limiting the /<short_code>/password endpoint. If you want you can open an issue for the same, I would try to fix after I launch the v2 this week