discourse/plugins/discourse-narrative-bot/spec
Roman Rizzi 3a73f29928 FIX: Rate limit and hijack certificate generation. (#8215)
To eliminate a DDOS attack vector, we're taking the following measures:

The endpoint will be rate-limited to 3 requests every 60 seconds (per user).
A 24 hours max-age cache header is sent with the response.
The route will be hijacked to generate the certificate in the background.
2019-10-22 15:39:58 -03:00
..
discourse_narrative_bot DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
jobs DEV: enable frozen string literal on all files 2019-05-13 09:31:32 +08:00
lib FIX: Rate limit and hijack certificate generation. (#8215) 2019-10-22 15:39:58 -03:00
requests FIX: Rate limit and hijack certificate generation. (#8215) 2019-10-22 15:39:58 -03:00
user_spec.rb DEV: amend test for anonymous handling to use real data 2019-05-29 15:05:37 +10:00