pharaun / alldice

Restful interface to a dice expression eval and generator.
Apache License 2.0
0 stars 1 forks source link

Implement more in depth limits so that the roller can't be DoS'd #7

Open pharaun opened 10 years ago

pharaun commented 10 years ago

Right now there's not much limits other than the fact that the entire interpreter is "pure" plus the addition of ST for the LispEnv.

Need at least the following:

  1. Reasonable upper bound on dice rolls
  2. Reasonable upper bound on number of rolls
  3. Reasonable upper bound on memory consumption
  4. Reasonable upper bound on execution time (probably via kernel limits and forking)