SH105: No rate limiting on Laravel auth routes

Severity: medium · Category: authentication · Applies to: laravel

Why it matters

Without throttling, login and password routes can be brute-forced.

How to fix

Apply the throttle middleware or RateLimiter::for() to authentication routes.

Ignoring this rule

Skip it everywhere in devshield.yml:

ignore:
  - SH105

Or skip one line with a comment on that line or the line above:

devshield-ignore: SH105