Skip to content

Rate limit API

As SNYK is complaining:

✗ [Medium] Allocation of Resources Without Limits or ThrottlingPath: controllers/Admins.js, line 315

Info: This endpoint handler performs a file system operation and does not use a rate-limiting mechanism. It may enable the attackers to perform Denial-of-service attacks.

Consider using a rate-limiting middleware such as express-limit.

See https://www.npmjs.com/package/express-rate-limit

Edited by Michael Kretschmann