sec: ADD rate-limit to endpoint and get-requests #21

This commit is contained in:
Caffeine Fueled 2026-05-25 13:06:05 +02:00
parent 16aca70b35
commit a2ff6bd763
Signed by: cf7
GPG key ID: CA295D643074C68C

View file

@ -303,6 +303,7 @@ async def upload_text(request: Request, authorized: bool = Depends(validate_uplo
raise HTTPException(status_code=500, detail="Failed to save file") raise HTTPException(status_code=500, detail="Failed to save file")
@app.get("/{paste_id}", response_class=PlainTextResponse) @app.get("/{paste_id}", response_class=PlainTextResponse)
@limiter.limit(RATE_LIMIT)
async def get_file(paste_id: str, request: Request, token: Optional[str] = None): async def get_file(paste_id: str, request: Request, token: Optional[str] = None):
"""Get paste content or delete if token is provided""" """Get paste content or delete if token is provided"""
if not paste_id.isalnum(): if not paste_id.isalnum():
@ -326,6 +327,7 @@ async def get_file(paste_id: str, request: Request, token: Optional[str] = None)
@app.post("/{paste_id}", response_class=PlainTextResponse) @app.post("/{paste_id}", response_class=PlainTextResponse)
@limiter.limit(RATE_LIMIT)
async def delete_paste_endpoint(paste_id: str, request: Request, token: Optional[str] = None): async def delete_paste_endpoint(paste_id: str, request: Request, token: Optional[str] = None):
"""Delete a paste using its deletion token""" """Delete a paste using its deletion token"""
client_ip = get_real_ip(request) client_ip = get_real_ip(request)