diff --git a/config/initializers/rack_attack.rb b/config/initializers/rack_attack.rb index 440fc43cb..81422458a 100644 --- a/config/initializers/rack_attack.rb +++ b/config/initializers/rack_attack.rb @@ -154,6 +154,12 @@ class Rack::Attack match_data[:account_id] if match_data.present? end + # Prevent abuse of conversation search api + throttle('/api/v1/accounts/:account_id/conversations/search', limit: 5, period: 1.minute) do |req| + match_data = %r{/api/v1/accounts/(?\d+)/conversations/search}.match(req.path) + match_data[:account_id] if match_data.present? + end + ## ----------------------------------------------- ## end