diff options
| -rw-r--r-- | config/initializers/rack_attack.rb | 4 |
1 files changed, 4 insertions, 0 deletions
diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index b35452f04..310052e9c 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -53,6 +53,10 @@ class Rack::Attack req.ip if req.api_request? end + throttle('throttle_media', limit: 30, period: 30.minutes) do |req| + req.authenticated_user_id if req.post? && req.path.start_with('/api/v1/media') + end + throttle('protected_paths', limit: 25, period: 5.minutes) do |req| req.ip if req.post? && req.path =~ PROTECTED_PATHS_REGEX end |