Julian Lam ad66a1af4b feat: allow passwords longer than 73 characters ...

Context: A bcrypt/blowfish limitation means that password length is capped at 72 characters. We can get around this without compromising on security
by hashing all incoming passwords with SHA512, and then sending that to bcrypt.

https://dropbox.tech/security/how-dropbox-securely-stores-your-passwords

2020-11-03 10:51:08 -05:00

..

database

fix: redis hget

2020-10-15 22:25:56 -04:00

files

fix: #8352, remove webfonts (#8354)

2020-06-01 11:06:23 -04:00

helpers

fix: vulnerability in cover and admin uploads (#8419)

2020-06-22 12:08:35 -04:00

mocks

chore: add info log into tests

2020-11-02 20:34:12 -05:00

.eslintrc

ESlint no-unused-vars

2017-02-18 15:05:36 -07:00

api.js

fix: breaking test from 0db0231cff

2020-10-27 20:37:23 -04:00

authentication.js

fix(writeapi): tests

2020-10-08 15:33:10 -04:00

batch.js

Async refactor in place (#7736)

2019-07-09 12:46:49 -04:00

blacklist.js

fix(deps): update to eslint@6

2019-06-22 21:23:32 -04:00

build.js

Remove sounds (#8617)

2020-09-06 23:45:00 -04:00

categories.js

fix: missing await

2020-05-12 12:18:30 -04:00

controllers-admin.js

Admin/users (#8762)

2020-10-13 22:42:50 -04:00

controllers.js

refactor: setupApiRoute signature

2020-10-15 23:12:19 -04:00

coverPhoto.js

fix: #7116

2018-12-18 19:43:28 -05:00

database.js

fix: db info page

2018-12-10 15:30:10 -05:00

defer-logger.js

upgrade to winston 3.1, closes #6590 (#6838)

2018-10-16 13:07:13 -04:00

emailer.js

fixed tests, closes #6371

2018-03-20 10:32:53 -04:00

feeds.js

feat: add privilege give/rescind hooks (#8336)

2020-05-26 21:57:38 -04:00

file.js

fix: vulnerability in cover and admin uploads (#8419)

2020-06-22 12:08:35 -04:00

flags.js

feat: additional tests for #8569

2020-08-19 09:04:37 -04:00

groups.js

fix: allow admins adding users to global moderators

2020-10-20 18:43:45 -04:00

image.js

up deps

2017-05-28 17:21:49 -04:00

locale-detect.js

fix: #7038, autoLocale logic not playing nicely with no-refresh auths (#7059)

2018-12-07 11:29:20 -05:00

messaging.js

feat: option in ACP to configure notification/email delay for chats

2020-09-28 11:15:45 -04:00

meta.js

Remove sounds (#8617)

2020-09-06 23:45:00 -04:00

notifications.js

fix: tests

2019-11-01 22:13:00 -04:00

package-install.js

fix: #8547, remove old deps during upgrade (#8557)

2020-08-11 14:32:44 -04:00

pagination.js

ESlint object-curly-spacing

2017-02-18 12:30:49 -07:00

password.js

feat: allow passwords longer than 73 characters

2020-11-03 10:51:08 -05:00

plugins-installed.js

feat: move plugin tests to separate file

2020-05-04 14:23:45 -04:00

plugins.js

Revert "fix: bypass nbbpm for now"

2020-09-08 11:42:35 -04:00

posts.js

feat: edit test

2020-09-21 15:15:30 -04:00

pubsub.js

fix: #8474

2020-07-07 20:13:14 -04:00

rewards.js

fix: change params

2019-09-17 09:12:45 -04:00

search-admin.js

style(eslint): match operator-linebreak preferences

2018-11-30 13:38:59 -05:00

search.js

feat: add privilege give/rescind hooks (#8336)

2020-05-26 21:57:38 -04:00

settings.js

more settings tests

2018-10-18 16:33:34 -04:00

socket.io.js

refactor: move groups.leave, fix some tests

2020-10-15 17:29:38 -04:00

template-helpers.js

feat: more discrete commit-on-save instead of commit-on-change w/ confirm modals (#8541)

2020-08-03 20:42:45 -04:00

topics.js

feat: #3783, min/max tags per category

2020-06-24 16:02:57 -04:00

translator.js

fix: #7974 (#7976)

2019-10-16 13:33:00 -04:00

upgrade.js

feat: force upgrade scripts for test

2020-09-03 14:08:30 -04:00

uploads.js

Remove sounds (#8617)

2020-09-06 23:45:00 -04:00

user.js

feat: allow passwords longer than 73 characters

2020-11-03 10:51:08 -05:00

utils.js

feat: add checkbox tests

2020-10-12 00:18:34 -04:00