4 Commits (23154126de984a18e893425d52035e492b7dd02a)

Author	SHA1	Message	Date
Jordan Wright	19ef924d89	Properly escaping server output when a request is made to ping a malicious webhook URL. ... Fixes #1901	2020-07-24 23:04:55 -05:00
Jordan Wright	bb7de8df3e	Initial Implementation of a Password Policy (#1867) ... This PR adds the initial work to implement a password policy as defined in #1538. Specifically, this implements the following * Rate limiting for the login handler * Implementing the ability for system admins to require a user to reset their password * Implementing a password policy that requires passwords to be a minimum of 8 characters * Removes the default password (gophish) for admin users to instead have the password randomly generated when Gophish first starts up * Adds a password strength meter when choosing a new password Fixes #1538	2020-06-19 22:03:51 -05:00
Jordan Wright	ec8b17238e	General code cleanup as part of an effort to integrate staticcheck into our CI pipeline.	2020-05-25 21:46:36 -05:00
Jordan Wright	01287e0dd5	Minor cleanup on webhook feature integration ... - Ran gofmt - Rebuilt minified static files - Updated validation payload	2019-12-15 22:07:55 -06:00