From 49f1e0a1ac4e5bf2b0825df3e7d289aa058421b5 Mon Sep 17 00:00:00 2001 From: Robin Appelman Date: Wed, 15 Jul 2026 03:13:51 +0200 Subject: [PATCH] fix: rate limiting for creating federated shares# Signed-off-by: Robin Appelman --- .../lib/Controller/RequestHandlerController.php | 2 ++ .../lib/Controller/RequestHandlerController.php | 2 ++ 2 files changed, 4 insertions(+) diff --git a/apps/cloud_federation_api/lib/Controller/RequestHandlerController.php b/apps/cloud_federation_api/lib/Controller/RequestHandlerController.php index fd55746a83c65..f47047736c04c 100644 --- a/apps/cloud_federation_api/lib/Controller/RequestHandlerController.php +++ b/apps/cloud_federation_api/lib/Controller/RequestHandlerController.php @@ -28,6 +28,7 @@ use OCA\CloudFederationAPI\Config; use OCP\AppFramework\Controller; use OCP\AppFramework\Http; +use OCP\AppFramework\Http\Attribute\AnonRateLimit; use OCP\AppFramework\Http\JSONResponse; use OCP\Federation\Exceptions\ActionNotSupportedException; use OCP\Federation\Exceptions\AuthenticationFailedException; @@ -73,6 +74,7 @@ public function __construct( * @NoCSRFRequired * @PublicPage * @BruteForceProtection(action=receiveFederatedShare) + * @AnonRateLimit(limit=5,period=1200) * * @param string $shareWith * @param string $name resource name (e.g. document.odt) diff --git a/apps/federatedfilesharing/lib/Controller/RequestHandlerController.php b/apps/federatedfilesharing/lib/Controller/RequestHandlerController.php index c5e1a8b4e7e9e..424dab1facd09 100644 --- a/apps/federatedfilesharing/lib/Controller/RequestHandlerController.php +++ b/apps/federatedfilesharing/lib/Controller/RequestHandlerController.php @@ -31,6 +31,7 @@ use OCA\FederatedFileSharing\FederatedShareProvider; use OCA\FederatedFileSharing\Notifications; use OCP\AppFramework\Http; +use OCP\AppFramework\Http\Attribute\AnonRateLimit; use OCP\AppFramework\OCS\OCSBadRequestException; use OCP\AppFramework\OCS\OCSException; use OCP\AppFramework\OCS\OCSForbiddenException; @@ -121,6 +122,7 @@ public function __construct(string $appName, /** * @NoCSRFRequired * @PublicPage + * @AnonRateLimit(limit=5,period=1200)] * * create a new share *