mirror of
https://github.com/paperless-ngx/paperless-ngx.git
synced 2026-04-03 22:58:51 +00:00
- Make sure we're always using regex with timeouts for user controlled data - Adds rate limiting to the token endpoint (configurable) - Signs the classifier pickle file with the SECRET_KEY and refuse to load one which doesn't verify. - Require the user to set a secret key, instead of falling back to our old hard coded one