Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

ShareLinks Protection #33542

Closed
RavenousCtulhu opened this issue Nov 15, 2018 · 3 comments
Closed

ShareLinks Protection #33542

RavenousCtulhu opened this issue Nov 15, 2018 · 3 comments

Comments

@RavenousCtulhu
Copy link

Is it possible when I share a Link with someone, that has some feature with a captcha or even some brute force protection, so unwanted users are not trying to guess the passwords randomly...

Thanks

@ownclouders
Copy link
Contributor

GitMate.io thinks possibly related issues are #4026 (Anonymous Upload - no upload with password protection), #921 (oc-1581 - CSRF protection issue), #9192 (Owncloud needs logfile bloat protection), #17528 (Prevent closing upgrade page while upgrade in progress), and #13493 (The Preview class needs better protection against breakage).

@karakayasemi
Copy link
Contributor

karakayasemi commented Nov 15, 2018

I quickly checked, we can aware of failed share access attempts in an app by using share.linkaccess event. But, as far as I see, no event before password check to interrupt. If we add a before password check event in files_sharing, it is possible to implement a proper protection policy for this purpose in Brute Force Protection app instead of core.

@PVince81
Copy link
Contributor

raised owncloud/brute_force_protection#57 in the brute force protection app

@lock lock bot locked as resolved and limited conversation to collaborators Jan 11, 2020
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Labels
None yet
Projects
None yet
Development

No branches or pull requests

4 participants