aboutsummaryrefslogtreecommitdiffstats
path: root/lib/default-names.ts
Commit message (Collapse)AuthorAgeFilesLines
* register: check the reCAPTCHA v3 score, action and hostname; cap signups per ↵Adam Soltys18 hours1-0/+63
network siteverify answers success for any validly minted v3 token, so success alone let scripted signups through. Signup now needs the register action and a 0.5 score, and login 0.3. A token minted for another site is refused. The web signup page must send a token. Signups are capped per IPv4 /16 or IPv6 /48, hourly and daily, and those keeping the auto-filled animal+NN username are capped site-wide per hour. Turnstile is verified and logged only, on trial. Co-Authored-By: Claude Opus 5.5 <[email protected]> Claude-Session: https://claude.ai/code/session_01NfM8zA4DdKvW1316z4zCaD