Webhook spam causes Denial-of-Service #1

Closed
opened 2022-03-02 23:01:44 +00:00 by julia · 1 comment

I've seen some people spam the /submit endpoint, causing the Webhook to get ratelimited which will result in a Denial-of-Service of the send message function.
An easy way to fix this would be to check if the length < 1.
I may create a pull request once I have enough time to read myself into the code and write a patch.

I've seen some people spam the /submit endpoint, causing the Webhook to get ratelimited which will result in a Denial-of-Service of the send message function. An easy way to fix this would be to check if the length < 1. I may create a pull request once I have enough time to read myself into the code and write a patch.
Author

While I'm at it: It would be a good idea to check for the POST method and if any other method is used return a 405 Method Not Allowed error.

While I'm at it: It would be a good idea to check for the `POST` method and if any other method is used return a `405 Method Not Allowed` error.
Sign in to join this conversation.
No Label
No Milestone
No project
No Assignees
1 Participants
Notifications
Due Date
The due date is invalid or out of range. Please use the format 'yyyy-mm-dd'.

No due date set.

Dependencies

No dependencies set.

Reference: TheRed-Software/Website#1
No description provided.