Alexandre Alapetite 2981714f15 Fix form login if user does not exist (#3377) ...

Small bug from https://github.com/FreshRSS/FreshRSS/pull/3070 , leading
to an exception due to not being able to log the error.

Minor: Also add some very primitive mitigation of timing attacks (to
find out whether a user exists or not, although I have not checked
whether this might be guessed through other means) - before, if the user
did not exist, the response was always measurably faster; now it is
harder to tell due to the noise

2021-01-17 19:57:39 +01:00

8.1 KiB

Raw Blame History

View Raw