[issue2551063] Rest/Xmlrpc interfaces needs failed login protection
John Rouillard <[email protected]>
| Newsgroups | gmane.comp.bug-tracking.roundup.devel |
|---|---|
| Message-ID | <[email protected]> |
New submission from John Rouillard: We have rate limiting for login attempts on the web interface. We should extend this to the xmlrpc and rest endpoints. The API endpoints are another mechanism for passowrd guessing attacks. We do have rest rate limiting, but that's to prevent misbehaving clients with valid credentials from using excessive resource. This ticket is for limiting connections with invalid credentials. ---------- messages: 6697 nosy: rouilj severity: normal status: new title: Rest/Xmlrpc interfaces needs failed login protection _________________________________________________ Roundup tracker <[email protected]> <https://issues.roundup-tracker.org/issue2551063> _________________________________________________