me
/
glitchier-soc
1
0
Fork 0
Code Issues Pull Requests Packages Projects Releases Wiki Activity

Avoid user enumeration with devise paranoid mode (#1527)

Browse Source
th-downstream
Yann GUERN 8 years ago committed by Eugen
parent 7a4cb10e6b
commit dc7ea0225a
1 changed files with 2 additions and 1 deletions
Show Stats Download Patch File Download Diff File

3
config/initializers/devise.rb
Unescape View File

@ -74,7 +74,8 @@ Devise.setup do |config|
# It will change confirmation, password recovery and other workflows # It will change confirmation, password recovery and other workflows
# to behave the same regardless if the e-mail provided was right or wrong. # to behave the same regardless if the e-mail provided was right or wrong.
# Does not affect registerable. # Does not affect registerable.
# config.paranoid = true # See : https://github.com/plataformatec/devise/wiki/How-To:-Using-paranoid-mode,-avoid-user-enumeration-on-registerable
config.paranoid = true
# By default Devise will store the user in session. You can skip storage for # By default Devise will store the user in session. You can skip storage for
# particular strategies by setting this option. # particular strategies by setting this option.

Write Preview
Loading…
Cancel
Save