nemunaire/chldapasswd
1
0
Fork 0
Code Issues Pull requests Releases Activity

feat(security): add altcha proof-of-work CAPTCHA to all sensitive forms

Browse source 
Integrate go-altcha to protect login, change password, lost password,
and reset password forms against automated submissions. Serves the
altcha widget JS from the embedded library, exposes a challenge
endpoint, validates responses server-side with replay prevention, and
updates the CSP to allow self-hosted scripts and WebAssembly.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
This commit is contained in:
nemunaire 2026-03-06 15:24:59 +07:00
commit 1e1888625d
14 changed files with 70 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

1
static/header.html
View file

@ -10,6 +10,7 @@
<link rel="stylesheet" href="https://stackpath.bootstrapcdn.com/bootstrap/4.1.3/css/bootstrap.min.css" integrity="sha384-MCw98/SFnGE8fJT3GXwEOngsV7Zt27NXFoaoApmYm81iuXoPkFOJwJ8ERdknLPMO" crossorigin="anonymous">
<title>nemunai.re password change</title>
<script src="altcha.min.js" async defer></script>
</head>
<body>
<div class="container">