@@ -88,6 +88,7 @@ The following sections list the changes for unreleased.
8888* Enhancement - Bump Web to v12.2.0: [#11834](https://github.com/owncloud/ocis/pull/11834)
8989* Enhancement - Introduce claims for multi-instance-ocis: [#11848](https://github.com/owncloud/ocis/pull/11848)
9090* Enhancement - Update the ocis_full deployment example images: [#11860](https://github.com/owncloud/ocis/pull/11860)
91+ * Enhancement - Implement brute force protection for public links: [#11864](https://github.com/owncloud/ocis/pull/11864)
9192* Enhancement - Update the ocis_full deployment example traefik image: [#11867](https://github.com/owncloud/ocis/pull/11867)
9293* Enhancement - Added a graph endpoint alias: [#11871](https://github.com/owncloud/ocis/pull/11871)
9394* Enhancement - Force Strict-Transport-Security: [#11880](https://github.com/owncloud/ocis/pull/11880)
@@ -290,6 +291,19 @@ The following sections list the changes for unreleased.
290291
291292 https://github.com/owncloud/ocis/pull/11860
292293
294+ * Enhancement - Implement brute force protection for public links: [#11864](https://github.com/owncloud/ocis/pull/11864)
295+
296+ Public links will be protected by default, allowing up to 5 wrong password
297+ attempts per hour. If such rate is exceeded, the link will be blocked for all
298+ the users until the failure rate goes below the configured threshold (5 failures
299+ per hour by default, as said).
300+
301+ The failure rate is configurable, so it can be 10 failures each 2 hours or 3
302+ failures per minute.
303+
304+ https://github.com/owncloud/ocis/pull/11864
305+ https://github.com/owncloud/reva/pull/460
306+
293307* Enhancement - Update the ocis_full deployment example traefik image: [#11867](https://github.com/owncloud/ocis/pull/11867)
294308
295309 * Traefik: 3.6.4
0 commit comments