Fix incorrect rate limit on PUT requests (#31356)
This commit is contained in:
		
							parent
							
								
									1701575704
								
							
						
					
					
						commit
						eaedd52def
					
				@ -142,7 +142,7 @@ class Rack::Attack
 | 
				
			|||||||
  end
 | 
					  end
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req|
 | 
					  throttle('throttle_password_change/account', limit: 10, period: 10.minutes) do |req|
 | 
				
			||||||
    req.warden_user_id if req.put? || (req.patch? && req.path_matches?('/auth'))
 | 
					    req.warden_user_id if (req.put? || req.patch?) && (req.path_matches?('/auth') || req.path_matches?('/auth/password'))
 | 
				
			||||||
  end
 | 
					  end
 | 
				
			||||||
 | 
					
 | 
				
			||||||
  self.throttled_responder = lambda do |request|
 | 
					  self.throttled_responder = lambda do |request|
 | 
				
			||||||
 | 
				
			|||||||
		Loading…
	
	
			
			x
			
			
		
	
		Reference in New Issue
	
	Block a user