Skip to content

fix(api): tighten the public-read routes past the default throttler - #679

Open
yggdrasilworld wants to merge 1 commit into
MergeFi:mainfrom
yggdrasilworld:fix/public-read-throttle-592
Open

yggdrasilworld wants to merge 1 commit into
MergeFi:mainfrom
yggdrasilworld:fix/public-read-throttle-592

Conversation

@yggdrasilworld

Copy link
Copy Markdown

What

The unauthenticated read-routes (/bounties/:id, /milestones, /maintenance-pools, their /:id) rode the lenient global default throttler (120/min) while returning whole tables — scrapable.

Fix

Explicit @Throttle limits on each.

Resolves #592

GET /bounties/:id, /milestones, /milestones/:id, /maintenance-pools and
/maintenance-pools/:id rode the lenient global 'default' throttler (120/min)
while returning whole tables — scrapable. Add explicit @Throttle limits.

Resolves MergeFi#592
@vercel

vercel Bot commented Oct 14, 2026

Copy link
Copy Markdown

@yggdrasilworld is attempting to deploy a commit to the chonilius' projects Team on Vercel.

A member of the Team first needs to authorize it.

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

GET /bounties/:id and the other public read routes have no throttle beyond the global 120/min, and list routes are full-table scans

1 participant