search

Baroshem / nuxt-security

🛡 Automatically configure your app to follow OWASP security patterns and principles by using HTTP Headers and Middleware
https://nuxt-security.vercel.app/
MIT License
787 stars 57 forks source link

Rate limiter whitelist #517

Open zguig52 opened 2 weeks ago

zguig52 commented 2 weeks ago

Is your feature request related to a problem? Please describe.

During load/performances tests, it would be nice to allow defining whitelisted IP (traffic injectors), so there is no need to disable this feature during the tests.

Also this could be interesting to be used when other internal trusted servers are calling the application for batch jobs.

Describe the solution you'd like

Add a new parameter, a list of IPs that will be whitelisted and not stored in the rate limiter DB, thus allowing no limits for specific hosts.

Describe alternatives you've considered

Disable the rate limiter during the tests

Baroshem commented 1 week ago

Hey @zguig52

Thanks for this idea, sounds really reasonable. Would you be interested in contributing to the module with this feature? I can provide any help needed :)

zguig52 commented 1 week ago

Hi @Baroshem ,

I would be very happy to contribute with this feature. I will try to get some time before the end of the month to work on it. I have first to read all the doc related to Nuxt plugin dev and setup the dev env with your plugin, I never worked on this.

Thanks for this :)

Baroshem commented 1 week ago

Awesome, please let me know if you have some questions.