aiden
/
mastodon
mirror of https://github.com/mastodon/mastodon
1
0
Fork 0
Code Issues Packages Projects Releases Wiki Activity
mastodon/app/controllers/concerns
History
ThibG 49eb4d4ddf
Add honeypot fields and minimum fill-out time for sign-up form () 
* Add honeypot fields to limit non-specialized spam

Add two honeypot fields: a fake website input and a fake password confirmation
one. The label/placeholder/aria-label tells not to fill them, and they are
hidden in CSS, so legitimate users should not fall into these.

This should cut down on some non-Mastodon-specific spambots.

* Require a 3 seconds delay before submitting the registration form

* Fix tests

* Move registration form time check to model validation

* Give people a chance to clear the honeypot fields

* Refactor honeypot translation strings

Co-authored-by: Claire <claire.github-309c@sitedethib.com>
..
account_controller_concern.rb Add ActivityPub secure mode ()
account_owned_concern.rb Add support for reversible suspensions through ActivityPub ()
accountable_concern.rb Add logging of admin actions ()
authorization.rb Add moderator role and add pundit policies for admin actions ()
cache_concern.rb Make Array-creation behavior of Paginable more predictable ()
challengable_concern.rb Bump rubocop from 0.86.0 to 0.88.0 ()
export_controller_concern.rb Refactor settings controllers ()
localized.rb Fix not working I18n on 2FA and Sign in token page ()
rate_limit_headers.rb Add specific rate limits for posting and following ()
registration_spam_concern.rb Add honeypot fields and minimum fill-out time for sign-up form ()
session_tracking_concern.rb Update session activation time (fixes ) ()
sign_in_token_authentication_concern.rb Fix 2FA/sign-in token sessions being valid after password change ()
signature_authentication.rb Allow retrieval of private statuses (single or in outbox) using HTTP signatures ()
signature_verification.rb Tweak signature verification ()
status_controller_concern.rb Refactor controllers for statuses, accounts, and more ()
two_factor_authentication_concern.rb Fix 2FA/sign-in token sessions being valid after password change ()
user_tracking_concern.rb Fix 2FA/sign-in token sessions being valid after password change ()