From 0961a034eaaaa63b55c412ba121072132f53aa79 Mon Sep 17 00:00:00 2001 From: Henry Oswald Date: Tue, 11 Apr 2017 16:08:38 +0100 Subject: [PATCH] added rate limit to compile endpoint --- services/web/app/coffee/router.coffee | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/services/web/app/coffee/router.coffee b/services/web/app/coffee/router.coffee index 860b7809ed..0556c23c5a 100644 --- a/services/web/app/coffee/router.coffee +++ b/services/web/app/coffee/router.coffee @@ -111,7 +111,13 @@ module.exports = class Router webRouter.post '/project/:Project_id/settings', AuthorizationMiddlewear.ensureUserCanWriteProjectSettings, ProjectController.updateProjectSettings webRouter.post '/project/:Project_id/settings/admin', AuthorizationMiddlewear.ensureUserCanAdminProject, ProjectController.updateProjectAdminSettings - webRouter.post '/project/:Project_id/compile', AuthorizationMiddlewear.ensureUserCanReadProject, CompileController.compile + webRouter.post '/project/:Project_id/compile', RateLimiterMiddlewear.rateLimit({ + endpointName: "compile-project-http" + params: ["Project_id"] + maxRequests: 800 + timeInterval: 60 * 60 + }), AuthorizationMiddlewear.ensureUserCanReadProject, CompileController.compile + webRouter.post '/project/:Project_id/compile/stop', AuthorizationMiddlewear.ensureUserCanReadProject, CompileController.stopCompile # Used by the web download buttons, adds filename header