Browse Source

Merge pull request #1425 from sharelatex/spd-rate-limit-on-project-upload

Add rate limit on project upload

GitOrigin-RevId: e2da5fb1815d85d8e82fe2f4498786f1fc5b5727
Alasdair Smith 7 năm trước cách đây
mục cha
commit
f32ecc744c

+ 5 - 0
services/web/app/coffee/Features/Uploads/UploadsRouter.coffee

@@ -14,6 +14,11 @@ module.exports =
 	apply: (webRouter, apiRouter) ->
 	apply: (webRouter, apiRouter) ->
 		webRouter.post '/project/new/upload',
 		webRouter.post '/project/new/upload',
 			AuthenticationController.requireLogin(),
 			AuthenticationController.requireLogin(),
+			RateLimiterMiddlewear.rateLimit({
+				endpointName: "project-upload"
+				maxRequests: 20
+				timeInterval: 60
+			}),
 			upload.single('qqfile'),
 			upload.single('qqfile'),
 			ProjectUploadController.uploadProject
 			ProjectUploadController.uploadProject