From: Michael Tremer <michael.tremer@ipfire.org>
Date: Tue, 21 Jan 2025 14:36:33 +0000 (+0000)
Subject: packages: Limit viewing/downloading of files
X-Git-Url: http://git.ipfire.org/?a=commitdiff_plain;h=170555af754d3b593d24574058cd17d221a96dfd;p=pbs.git

packages: Limit viewing/downloading of files

This is all going into a single bucket so that we don't have a rate
limiter per path.

Signed-off-by: Michael Tremer <michael.tremer@ipfire.org>
---

diff --git a/src/web/packages.py b/src/web/packages.py
index 752d11a3..b4be53da 100644
--- a/src/web/packages.py
+++ b/src/web/packages.py
@@ -91,6 +91,7 @@ class ShowHandler(base.BaseHandler):
 
 
 class FileDownloadHandler(base.BaseHandler):
+	@base.ratelimit(limit=100, minutes=60, key="files")
 	async def get(self, uuid, path):
 		package = await self.backend.packages.get_by_uuid(uuid)
 		if not package:
@@ -124,6 +125,7 @@ class FileDownloadHandler(base.BaseHandler):
 
 
 class FileViewHandler(base.BaseHandler):
+	@base.ratelimit(limit=100, minutes=60, key="files")
 	async def get(self, uuid, path):
 		package = await self.backend.packages.get_by_uuid(uuid)
 		if not package: