Fix re-sending of e-mail confirmation not being rate limited (#13360)

Fix #13330
5 years ago · 8fa78c0ec8
parent 241916b0dd
commit 8fa78c0ec8
1 changed files with 1 additions and 0 deletions
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@ -42,6 +42,7 @@ class Rack::Attack
    /auth/sign_in
    /auth
    /auth/password
+    /auth/confirmation
  ).freeze

  PROTECTED_PATHS_REGEX = Regexp.union(PROTECTED_PATHS.map { |path| /\A#{Regexp.escape(path)}/ })