mirror of
https://github.com/discourse/discourse.git
synced 2025-02-24 06:28:52 +00:00
When creating a group membership request, there is no character limit on the 'reason' field. This can be potentially be used by an attacker to create enormous amount of data in the database.