5 years ago

Category: Laravel

First, a security fix related to password resets was contributed. The fix throttles users to only creating one password reset record every 60 seconds. This prevents attackers from submitting many password requests that will flood users’ email. You can see the commits in 23041e9 and a934160.