From ba9486cfd2e1207c6c6024cff74bf89ca48f23af Mon Sep 17 00:00:00 2001 From: Carsten Rose <carsten.rose@math.uzh.ch> Date: Mon, 25 Mar 2019 11:27:14 +0100 Subject: [PATCH] Add word REST in documentation for securityFailedAuthDelay --- extension/Documentation/Manual.rst | 2 +- extension/ext_conf_template.txt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/extension/Documentation/Manual.rst b/extension/Documentation/Manual.rst index 53ae5941d..b2eae8146 100644 --- a/extension/Documentation/Manual.rst +++ b/extension/Documentation/Manual.rst @@ -439,7 +439,7 @@ Extension Manager: QFQ Configuration | securityGetMaxLength | 50 | GET vars longer than 'x' chars triggers an `attack-recognized`. | | | | `ExceptionMaxLength`_. | +-----------------------------------+-------------------------------------------------------+----------------------------------------------------------------------------+ -| securityFailedAuthDelay | 3 | If authorization fails, sleep 'x' seconds before answering the request. | +| securityFailedAuthDelay | 3 | If REST authorization fails, sleep 'x' seconds before answering. | +-----------------------------------+-------------------------------------------------------+----------------------------------------------------------------------------+ | Form-Config | +-----------------------------------+-------------------------------------------------------+----------------------------------------------------------------------------+ diff --git a/extension/ext_conf_template.txt b/extension/ext_conf_template.txt index 1198cf013..d481e50a4 100644 --- a/extension/ext_conf_template.txt +++ b/extension/ext_conf_template.txt @@ -107,7 +107,7 @@ securityShowMessage = true # cat=security/security; type=string; label='GET'-Parameter max length:Default is '50'. GET vars longer than 'x' character triggers an `attack-detected`. securityGetMaxLength = 50 -# cat=security/security; type=string; label=Failed auth delay in seconds:Default is '3'. +# cat=security/security; type=string; label=REST - Failed auth delay in seconds:Default is '3'. securityFailedAuthDelay = 3 # cat=security/security; type=string; label=Session Timeout in seconds:Default is empty to take the php.ini system value (minimum of 'session.cookie_lifetime' and 'session.gc_maxlifetime'). -- GitLab