webapp/bookstack
1
0
Fork 0
mirror of https://github.com/BookStackApp/BookStack.git synced 2025-08-09 10:22:51 +03:00
Code Activity

Exports: Added rate limits for UI exports

Browse Source 
Just as a measure to prevent potential abuse of these potentially
longer-running endpoints.
Adds test to cover for ZIP exports, but applied to all formats.
This commit is contained in:
Dan Brown
2025-01-01 15:42:59 +00:00
parent 7e31725d48
commit 1ff2826678
5 changed files with 32 additions and 0 deletions
Download Patch File Download Diff File Expand all files Collapse all files

7
app/App/Providers/RouteServiceProvider.php
View File

@@ -85,5 +85,12 @@ class RouteServiceProvider extends ServiceProvider
RateLimiter::for('public', function (Request $request) {
return Limit::perMinute(10)->by($request->ip());
});
RateLimiter::for('exports', function (Request $request) {
$user = user();
$attempts = $user->isGuest() ? 4 : 10;
$key = $user->isGuest() ? $request->ip() : $user->id;
return Limit::perMinute($attempts)->by($key);
});
}
}