OpenSourceArk/Ghost
1
0
Fork 0
Code Issues Pull Requests Actions Packages Projects Releases Wiki Activity

Fixed spam prevention for private sites

Browse Source 
fixes #11740

- there was a discrepancy in the use of `private_blog` within the
  code, and `private_block` in the default config
- this commit switches the code to `block` in order to avoid breaking
  existing configs
This commit is contained in:
Daniel Lockyer 2020-04-15 16:44:53 +01:00
parent 9ae5ce0f84
commit 8d9d129be4
1 changed files with 4 additions and 4 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

8
core/server/web/shared/middlewares/api/spam-prevention.js
View File

@ -6,7 +6,7 @@ const config = require('../../../../config');
const {logging,i18n} = require('../../../../lib/common');
const spam = config.get('spam') || {};
const spamPrivateBlog = spam.private_blog || {};
const spamPrivateBlock = spam.private_block || {};
const spamGlobalBlock = spam.global_block || {};
const spamGlobalReset = spam.global_reset || {};
const spamUserReset = spam.user_reset || {};
@ -190,8 +190,8 @@ const privateBlog = () => {
logging.error(new errors.TooManyRequestsError({
message: i18n.t('errors.middleware.spamprevention.tooManySigninAttempts.error',
{
rateSigninAttempts: spamPrivateBlog.freeRetries + 1 || 5,
rateSigninPeriod: spamPrivateBlog.lifetime || 60 * 60
rateSigninAttempts: spamPrivateBlock.freeRetries + 1 || 5,
rateSigninPeriod: spamPrivateBlock.lifetime || 60 * 60
}),
context: i18n.t('errors.middleware.spamprevention.tooManySigninAttempts.context')
}));
@ -201,7 +201,7 @@ const privateBlog = () => {
}));
},
handleStoreError: handleStoreError
}, pick(spamPrivateBlog, spamConfigKeys))
}, pick(spamPrivateBlock, spamConfigKeys))
);
return privateBlogInstance;