Amar Cutura
Results
2
issues of
Amar Cutura
It is possible to run a modified client and return a fake length e.g. `99999999` and replace the current longer chain with a shorter one.
Currently the email tokens (e.g. for password reset) are created using `django.signing` and always with the same salt (`django.core.signing`). It would be wise to use specific salt for `django-graphql-auth`.
enhancement