Add rate limit for media proxy requests (#10490)

30 per 30 minutes, like media uploads
2019-04-07 04:26:43 +02:00 · 2019-04-07 04:26:43 +02:00 · 0e8819f0e8
commit 0e8819f0e8
parent 6a0cd366ef
1 changed files with 4 additions and 0 deletions
--- a/config/initializers/rack_attack.rb
+++ b/config/initializers/rack_attack.rb
@ -57,6 +57,10 @@ class Rack::Attack
    req.authenticated_user_id if req.post? && req.path.start_with?('/api/v1/media')
  end

+  throttle('throttle_media_proxy', limit: 30, period: 30.minutes) do |req|
+    req.ip if req.path.start_with?('/media_proxy')
+  end
+
  throttle('throttle_api_sign_up', limit: 5, period: 30.minutes) do |req|
    req.ip if req.post? && req.path == '/api/v1/accounts'
  end