Fix re-sending of e-mail confirmation not being rate limited (#13360)

Fix #13330
5 years ago · 9241cbf861
parent dd23fc6b12
commit 9241cbf861
1 changed files with 1 additions and 0 deletions
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@ -42,6 +42,7 @@ class Rack::Attack
    /auth/sign_in
    /auth
    /auth/password
+    /auth/confirmation
  ).freeze

  PROTECTED_PATHS_REGEX = Regexp.union(PROTECTED_PATHS.map { |path| /\A#{Regexp.escape(path)}/ })