• Patrick Bajao's avatar
    Set maximum limit for profile events · f28f7d11
    Patrick Bajao authored
    We are previously allowing to request for profile events with
    unlimited `limit`. That can result to possible DoS since a
    malicious user can request 1k events and it'll take a while to
    respond.
    
    Maximum limit is based on the existing `Kaminari.max_per_page`
    setting we have.
    f28f7d11
security-pb-limit-profile-events.yml 86 Bytes