3 ms·
While you added rate limiting, it looks like you might have only done it for `RemoteAddr`. If I set random `X-Forwarded-For` and `X-Real-IP` I seems to let me p
by buffington 6y ago
While you added rate limiting, it looks like you might have only done it for `RemoteAddr`. If I set random `X-Forwarded-For` and `X-Real-IP` I seems to let me post as quickly as I'd like.
That allowed me to send 200 backspaces, then fill the page with "i like turtles" or just the letter "o".
That said, there's a backup rate limiter working for you. Github.
Github has blocked my IP because of my shenanigans, which I suppose is fair. I'd have created an issue there if not for that.