search

glittergallery / GlitterGallery

Share, collect feedback on, and view/manage design iterations.
MIT License
45 stars 33 forks source link

No DDoS protection #190

Open gameFace22 opened 9 years ago

gameFace22 commented 9 years ago

There is no DDoS protection in the sites which are hosted with GG. To test, https://github.com/grafov/hulk/blob/master/hulk.py

pwnfoo commented 9 years ago

I'll work on this :)

rohitpaulk commented 9 years ago

@gameFace22 - What kind of protection are you thinking of? Wouldn't such logic be external to the application code?

sarupbanskota commented 9 years ago

@rohitpaulk while I felt the same way (it seems more like an infra concern that OpenShift's interface with Ruby should deal with), I came across this https://github.com/kickstarter/rack-attack after some looking around.

@sachinkamath if you're taking them up, just remember to work off a separate security feature branch. We're likely to add some work to the project in the next few days, so we wouldn't want to lose direction :)

@gameFace22, thanks for pointing these out and keep 'em coming!

pwnfoo commented 9 years ago

We can probably cut down the number of page requests from a specific IP using this gem. The source code is here. Correct me if I'm wrong.