moleculemaker / molli-frontend

Cloned clean-frontend to create this repository
Apache License 2.0
0 stars 0 forks source link

add rate limiting for anonymous user #39

Open matthewberry opened 10 months ago

matthewberry commented 10 months ago

The mmli-job-manager backend supports receiving the hcaptcha_secret, but currently does not throw an error if it is missing.

The molli-frontend does not currently prompt user for hcaptcha, and does not send an hcaptcha_secret along with it's request.

Both of these are needed to avoid the same DDOS fate that brought CLEAN down after it was first launched.