Releases: BaseSecrete/active_hashcash
Releases · BaseSecrete/active_hashcash
v0.4.0
What's Changed
- Prevent from password managers to submit the form before the stamp has been computed
- Added support for the "button" submit form tag
- Added Catalan language
- Added base_controller_class configuration option to allow specifying a custom base controller for the ActiveHashcash dashboard, enhancing flexibility in diverse application architectures.
Thanks to @elalemanyo and @microstudi for their contributions.
Full Changelog: 0.3.2...v0.4.0
0.3.2
- Fix methods conflitc by not including ActionView::Helpers::FormTagHelper
- Sanitize params by forcing as a String
0.3.0
This new version brings two important features:
1. Increase complexity automatically
2. Add mountable dashboard
Increasing the complexity automatically is a better way to slow down brute force attacks. The more an IP address spends Hashcash stamps, the harder it becomes to solve them.
The mountable dashboard allows to monitor spent stamps and IP addresses that are sending most of them. Finally, it gives an idea on who and how many times sensitive forms have been submitted.
IMPORTANT: For those updating from version 0.2.0 the storage has changed. It switched from Redis to the ActiveRecord database. That means you have to run migrations :
rails active_hashcash:install:migrations
rails db:migrate