change the defaults in the qhelp for missing-rate-limit to something …

…more reasonable
github · Aug 10, 2023 · 5ffce86 · 5ffce86
1 parent 4e954c2
commit 5ffce86
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/javascript/ql/src/Security/CWE-770/examples/MissingRateLimitingGood.js b/javascript/ql/src/Security/CWE-770/examples/MissingRateLimitingGood.js
@@ -4,8 +4,8 @@ var app = express();
 // set up rate limiter: maximum of five requests per minute
 var RateLimit = require('express-rate-limit');
 var limiter = RateLimit({
-  windowMs: 1*60*1000, // 1 minute
-  max: 5
+  windowMs: 15 * 60 * 1000, // 15 minutes
+  max: 100, // max 100 requests per windowMs
 });
 
 // apply rate limiter to all requests