4 ms·
> I forgot about one thing; their HTTP interface to diffs. Right -- pretty much any page that uses pjax / turbolinks to load segments of the page: each is an e
by grandalf 12y ago
> I forgot about one thing; their HTTP interface to diffs.
Right -- pretty much any page that uses pjax / turbolinks to load segments of the page: each is an expensive query going to the backend.
GH recently added a timeout for the diff page if it's too large which probably also caches the "too large" status. The sweet spot for an attack would be the pages that don't time out but still create a 95th percentile request.