BugAlertDotOrg / bugalert

MIT License
207 stars 20 forks source link

Improvement: Set maximum allowable price for SMS sends #76

Closed sullivanmatt closed 9 months ago

sullivanmatt commented 1 year ago

Defending against this attack: https://billychasen.medium.com/twilios-toll-fraud-problem-28b3aef39243

The subscriptions API has no rate limit (will add a Cloudflare limit after this PR) and could easily be abused by a fraudster. Adding a max price per message to ensure nobody drains my bank account.

https://www.twilio.com/blog/2015/08/introducing-max-price.html