7d0e4c6be4
SUMMARY At present, sitekey can be abused by installing it on a third-party site as verifying the access token returned from CAPTCHA validation doesn't require any authentication. This fix uses account secret authentication to verify access tokens credits: by @gusted |
||
---|---|---|
.. | ||
db-core | ||
db-migrations | ||
db-sqlx-postgres |