Repository navigation

fix(security): harden the front-end AJAX handlers (superseded by #150) - #149

Closed

eleshar wants to merge 2 commits into

chore/lsx-login-gulp5from

fix/lsx-login-nopriv-ajax

Commits on Sep 8, 2026
- fix(security): stop returning the password reset key in the AJAX response
  eleshar
  committed
  57e1d02
- fix(security): require a nonce and rate limit the nopriv AJAX handlers
  eleshar
  committed
  2a27423