mirror of
https://github.com/discourse/discourse.git
synced 2025-02-23 06:43:09 +08:00

When creating a group membership request, there is no character limit on the 'reason' field. This can be potentially be used by an attacker to create enormous amount of data in the database.