discourse

mirror of https://github.com/discourse/discourse.git synced 2024-12-02 14:56:22 +08:00

History

Roman Rizzi 835d2be4da FIX: Rate limit and hijack certificate generation. (#8215 ) To eliminate a DDOS attack vector, we're taking the following measures: The endpoint will be rate-limited to 3 requests every 60 seconds (per user). A 24 hours max-age cache header is sent with the response. The route will be hijacked to generate the certificate in the background.	2019-10-21 13:14:15 -03:00
..
discourse_narrative_bot	FIX: Rate limit and hijack certificate generation. (#8215 )	2019-10-21 13:14:15 -03:00

FIX: Rate limit and hijack certificate generation. (#8215 )

To eliminate a DDOS attack vector, we're taking the following measures:

The endpoint will be rate-limited to 3 requests every 60 seconds (per user).
A 24 hours max-age cache header is sent with the response.
The route will be hijacked to generate the certificate in the background.

2019-10-21 13:14:15 -03:00

discourse_narrative_bot

FIX: Rate limit and hijack certificate generation. (#8215 )

2019-10-21 13:14:15 -03:00