Closed Bug 858247 Opened 12 years ago Closed 12 years ago

[socorro-crashstats] Rate limiter on the public API

Categories

(Socorro :: Webapp, task)

Product:
Socorro
Component:
Webapp
Platform:
x86
macOS
Type:
task
Priority:
Not set
Severity:
normal

Tracking

(Not tracked)

Status:
RESOLVED FIXED

People

(Reporter: peterbe, Assigned: peterbe)

References

Details

The public API is built on top of the models which are heavily cached. However, if you make a malicious attack you could fire off URLs that just vary by a small amount (e.g. /url/?version=000001 and /url/?version=000002) and that would bypass the cache and potentially start far too many queries on the middleware.
Assignee: nobody → peterbe
Status: NEW → ASSIGNED
Commits pushed to master at https://github.com/mozilla/socorro-crashstats https://github.com/mozilla/socorro-crashstats/commit/62a42f1804ee84d7b48c4de3dbc5bbd0236bdfb2 fixes bug 858247 - Rate limiter on the public API https://github.com/mozilla/socorro-crashstats/commit/b72acc2bb0bc37e47c013c2ba32274ada295aef6 Merge pull request #342 from peterbe/bug858247-rate-limiter-on-the-public-api fixes bug 858247 - Rate limiter on the public API
Status: ASSIGNED → RESOLVED
Closed: 12 years ago
Resolution: --- → FIXED
You need to log in before you can comment on or make changes to this bug.