From 74e9270d58720bc4529b59d7b3cfb8f33d38acaa Mon Sep 17 00:00:00 2001 From: KernelDeimos Date: Wed, 24 Apr 2024 16:16:31 -0400 Subject: [PATCH] Fix --- packages/backend/src/routers/contactUs.js | 5 +++++ .../src/services/abuse-prevention/EdgeRateLimitService.js | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) diff --git a/packages/backend/src/routers/contactUs.js b/packages/backend/src/routers/contactUs.js index 2ac09f32f..b57de13d6 100644 --- a/packages/backend/src/routers/contactUs.js +++ b/packages/backend/src/routers/contactUs.js @@ -46,6 +46,11 @@ router.post('/contactUs', auth, express.json(), async (req, res, next)=>{ else if(req.body.message.length > 100000) return res.status(400).send({message: 'message is too long'}) + const svc_edgeRateLimit = req.services.get('edge-rate-limit'); + if ( ! svc_edgeRateLimit.check('contact-us') ) { + return res.status(429).send('Too many requests.'); + } + // modules const db = req.services.get('database').get(DB_WRITE, 'feedback'); diff --git a/packages/backend/src/services/abuse-prevention/EdgeRateLimitService.js b/packages/backend/src/services/abuse-prevention/EdgeRateLimitService.js index b30eb304a..32e22947b 100644 --- a/packages/backend/src/services/abuse-prevention/EdgeRateLimitService.js +++ b/packages/backend/src/services/abuse-prevention/EdgeRateLimitService.js @@ -15,7 +15,7 @@ class EdgeRateLimitService extends BaseService { limit: 10, window: 15 * MINUTE, }, - ['contactUs']: { + ['contact-us']: { limit: 10, window: 15 * MINUTE, },