From 170555af754d3b593d24574058cd17d221a96dfd Mon Sep 17 00:00:00 2001 From: Michael Tremer Date: Tue, 21 Jan 2025 14:36:33 +0000 Subject: [PATCH] packages: Limit viewing/downloading of files This is all going into a single bucket so that we don't have a rate limiter per path. Signed-off-by: Michael Tremer --- src/web/packages.py | 2 ++ 1 file changed, 2 insertions(+) diff --git a/src/web/packages.py b/src/web/packages.py index 752d11a3..b4be53da 100644 --- a/src/web/packages.py +++ b/src/web/packages.py @@ -91,6 +91,7 @@ class ShowHandler(base.BaseHandler): class FileDownloadHandler(base.BaseHandler): + @base.ratelimit(limit=100, minutes=60, key="files") async def get(self, uuid, path): package = await self.backend.packages.get_by_uuid(uuid) if not package: @@ -124,6 +125,7 @@ class FileDownloadHandler(base.BaseHandler): class FileViewHandler(base.BaseHandler): + @base.ratelimit(limit=100, minutes=60, key="files") async def get(self, uuid, path): package = await self.backend.packages.get_by_uuid(uuid) if not package: -- 2.47.3