OTP code field has no length/format validation #15

Open
opened 2026-02-27 21:22:08 -05:00 by toph · 0 comments
Owner

auth.remote.ts:69
accepts any non-empty string. Add v.regex(/^\d{4,8}$/) or at least v.maxLength(10) for defense in depth

auth.remote.ts:69 accepts any non-empty string. Add v.regex(/^\d{4,8}$/) or at least v.maxLength(10) for defense in depth
Sign in to join this conversation.
No milestone
No project
No assignees
1 participant
Notifications
Due date
The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference
toph/spellbinder#15
No description provided.