fix(files_sharing): rate limit share creation 10 times per 10 minutes

Signed-off-by: skjnldsv <[email protected]>
nextcloud · Feb 19, 2025 · 70d0d8d · 70d0d8d
1 parent ff86bac
commit 70d0d8d
Showing 1 changed file with 2 additions and 1 deletion.
diff --git a/apps/files_sharing/lib/Controller/ShareAPIController.php b/apps/files_sharing/lib/Controller/ShareAPIController.php
@@ -557,6 +557,7 @@ public function deleteShare(string $id): DataResponse {
 	 * 200: Share created
 	 */
 	#[NoAdminRequired]
+	#[UserRateLimit(limit: 10, duration: 600)]
 	public function createShare(
 		?string $path = null,
 		?int $permissions = null,
@@ -2146,7 +2147,7 @@ private function checkInheritedAttributes(IShare $share): void {
 	 * 200: The email notification was sent successfully
 	 */
 	#[NoAdminRequired]
-	#[UserRateLimit(limit: 5, period: 120)]
+	#[UserRateLimit(limit: 10, period: 600)]
 	public function sendShareEmail(string $id, $password = ''): DataResponse {
 		try {
 			$share = $this->getShareById($id);