4 ms·
Be VERY careful with this sort of advice: "Infrequent user actions can lead to complex server actions." Malicious users use that knowledge to craft disproporti
by DonPellegrino 12y ago
Be VERY careful with this sort of advice: "Infrequent user actions can lead to complex server actions."
Malicious users use that knowledge to craft disproportionally powerful DOS attacks. Your site is as vulnerable as the most CPU-expensive feature.
At the very least, rate limit those features.
- derefr 12y agoI guess I read "infrequent" differently: anything a user can do will inherently be frequent given enough scale. On the other hand, that "export everything ever to CSV" button in the admin panel? That can take a few CPU seconds. It won't matter, because only five people even have the ability to hit that API endpoint, let alone the inclination.