Skip to content

Releases: BaseSecrete/active_hashcash

v0.4.0

16 May 09:05
Compare
Choose a tag to compare

What's Changed

  • Prevent from password managers to submit the form before the stamp has been computed
  • Added support for the "button" submit form tag
  • Added Catalan language
  • Added base_controller_class configuration option to allow specifying a custom base controller for the ActiveHashcash dashboard, enhancing flexibility in diverse application architectures.

Thanks to @elalemanyo and @microstudi for their contributions.

Full Changelog: 0.3.2...v0.4.0

0.3.2

29 Aug 13:04
Compare
Choose a tag to compare
  • Fix methods conflitc by not including ActionView::Helpers::FormTagHelper
  • Sanitize params by forcing as a String

0.3.0

29 Aug 13:03
Compare
Choose a tag to compare

This new version brings two important features:

1. Increase complexity automatically
2. Add mountable dashboard

Increasing the complexity automatically is a better way to slow down brute force attacks. The more an IP address spends Hashcash stamps, the harder it becomes to solve them.

ActiveHashcash increases complexity logarithmicly

The mountable dashboard allows to monitor spent stamps and IP addresses that are sending most of them. Finally, it gives an idea on who and how many times sensitive forms have been submitted.

active_hashcash_dashboard

IMPORTANT: For those updating from version 0.2.0 the storage has changed. It switched from Redis to the ActiveRecord database. That means you have to run migrations :

rails active_hashcash:install:migrations
rails db:migrate