dec0dOS / zero-ui

ZeroUI - ZeroTier Controller Web UI - is a web user interface for a self-hosted ZeroTier network controller.
GNU General Public License v3.0
951 stars 152 forks source link

feat: implement rate-limiting for authorization #175

Closed dec0dOS closed 1 year ago

dec0dOS commented 1 year ago

Feature Request

Additional Context

More info here: https://github.com/dec0dOS/zero-ui/security/code-scanning/5

aruznieto commented 1 year ago

Link doesnt work

dec0dOS commented 1 year ago

Seems like code scanning alerts are available only for maintainers. Here's the extracted data from the link: Missing rate limiting · Code scanning alert #5 · dec0dOS:zero-ui.pdf

aruznieto commented 1 year ago

WIP

dec0dOS commented 1 year ago

Closed with https://github.com/dec0dOS/zero-ui/pull/179. Thanks, @aruznieto!

dec0dOS commented 1 year ago

Some issues with the rate limiter: https://github.com/dec0dOS/zero-ui/discussions/181#discussioncomment-7294898

dec0dOS commented 1 year ago

Fixed with https://github.com/dec0dOS/zero-ui/commit/213c9499f2cabda1706225750f40dab64d5297a0