Merge pull request #13940 from erik-krogh/rate-default

JS: change the defaults in the qhelp for missing-rate-limit to something more reasonable
github · Aug 10, 2023 · 3e2c6d6 · 3e2c6d6
2 parents 5a6ce29 + 5ffce86
commit 3e2c6d6
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/javascript/ql/src/Security/CWE-770/examples/MissingRateLimitingGood.js b/javascript/ql/src/Security/CWE-770/examples/MissingRateLimitingGood.js
@@ -4,8 +4,8 @@ var app = express();
 // set up rate limiter: maximum of five requests per minute
 var RateLimit = require('express-rate-limit');
 var limiter = RateLimit({
-  windowMs: 1*60*1000, // 1 minute
-  max: 5
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 100, // max 100 requests per windowMs
 });
 
 // apply rate limiter to all requests