Rate limiting detection too weak (10 requests) #4

Open
opened 2026-06-19 06:22:31 -07:00 by drjones · 0 comments
Owner

Current rate limiting test in vectors/14-api-abuse.sh sends only 10 rapid requests. Most real API rate limiters require 30-100+ requests over a longer window to trigger.

Fix: Increase to 50 requests with a 200ms spread, and also test different endpoints separately.

Current rate limiting test in `vectors/14-api-abuse.sh` sends only 10 rapid requests. Most real API rate limiters require 30-100+ requests over a longer window to trigger. **Fix:** Increase to 50 requests with a 200ms spread, and also test different endpoints separately.
drjones added the enhancement label 2026-06-19 06:22:31 -07:00
Sign in to join this conversation.
1 Participants
Notifications
Due Date
No due date set.
Dependencies

No dependencies set.

Reference: drjones/th-analyzer#4