https://bugzilla.wikimedia.org/show_bug.cgi?id=40496
Web browser: ---
Bug #: 40496
Summary: Other actions beside login should be throttled based
on failed captcha attempts
Product: MediaWiki extensions
Version: master
Platform: All
OS/Version: All
Status: NEW
Severity: normal
Priority: Unprioritized
Component: ConfirmEdit (CAPTCHA extension)
AssignedTo: [email protected]
ReportedBy: [email protected]
Classification: Unclassified
Mobile Platform: ---
Just like we have $wgCaptchaBadLoginAttempts, there should be a config array
maximum attempts for other $wgCaptchaTriggers. Without this, guessing and
building canned answer libraries becomes easier (though $wgCaptchaDeleteOnSolve
helps).
--
Configure bugmail: https://bugzilla.wikimedia.org/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
You are on the CC list for the bug.
_______________________________________________
Wikibugs-l mailing list
[email protected]
https://lists.wikimedia.org/mailman/listinfo/wikibugs-l
