Files
codeql/javascript/ql/test/query-tests/Security/CWE-770/MissingRateLimitingGood.js
2018-08-02 17:53:23 +01:00

19 lines
421 B
JavaScript

var express = require('express');
var app = express();
// set up rate limiter: maximum of five requests per minute
var RateLimit = require('express-rate-limit');
var limiter = new RateLimit({
windowMs: 1*60*1000, // 1 minute
max: 5
});
// apply rate limiter to all requests
app.use(limiter);
app.get('/:path', function(req, res) {
let path = req.params.path;
if (isValidPath(path))
res.sendFile(path);
});