nemunaire/chldapasswd
1
0
Fork 0
Code Issues Pull requests Releases Activity
76 commits 1 branch 0 tags 293 KiB
Commit graph

1 commit

Author SHA1 Message Date
Pierre-Olivier Mercier
54b74fb233 fix(security): enforce 128-character maximum password length
All checks were successful
continuous-integration/drone/push Build is passing
Details 
SHA-512 crypt has no 72-char truncation like bcrypt, but an unbounded
password length allows DoS via CPU exhaustion. Caps input at 128 chars
and adds unit tests for boundary conditions in checkPasswdConstraint.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>
 2026-03-23 10:44:52 +07:00