Skip to content

feat: Implement atomic operations and rate limiting#2566

Open
khushal-winner wants to merge 3 commits intoOWASP:masterfrom
khushal-winner:feat/rate-limiting-atomic-operations
Open

feat: Implement atomic operations and rate limiting#2566
khushal-winner wants to merge 3 commits intoOWASP:masterfrom
khushal-winner:feat/rate-limiting-atomic-operations

Conversation

@khushal-winner
Copy link
Copy Markdown
Contributor

@khushal-winner khushal-winner commented Mar 8, 2026

Closes - #2559

  • Add atomic card play operations to prevent race conditions
  • Implement comprehensive rate limiting for API endpoints
  • Add rate limiting plug to API pipeline
  • Add comprehensive test coverage for rate limiting
  • Fix CAPEC-212 functionality misuse vulnerabilities

Security improvements: prevents DoS attacks and race conditions

Copy link
Copy Markdown
Collaborator

@sydseter sydseter left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This may not work on fly, but I’ll try it out.

Comment thread copi.owasp.org/lib/copi/rate_limiter.ex
Comment thread copi.owasp.org/lib/copi/rate_limiter.ex Outdated
Comment thread copi.owasp.org/lib/copi/rate_limiter.ex Outdated
@khushal-winner
Copy link
Copy Markdown
Contributor Author

@sydseter , fixed the changes

@khushal-winner khushal-winner requested a review from sydseter March 13, 2026 14:02
@sydseter
Copy link
Copy Markdown
Collaborator

@khushal-winner could you resolve the conflicts?

@khushal-winner
Copy link
Copy Markdown
Contributor Author

@khushal-winner could you resolve the conflicts?

@sydseter yes i have resolved the conflicts now

@sydseter
Copy link
Copy Markdown
Collaborator

Still there.

@khushal-winner khushal-winner force-pushed the feat/rate-limiting-atomic-operations branch 2 times, most recently from fc79ce4 to 03589ed Compare March 22, 2026 13:21
…ct resolution

- Add atomic card play operations to prevent race conditions
- Implement rate limiting for API endpoints
- Add comprehensive test coverage for rate limiting
- Resolve merge conflicts with upstream improvements
- Enhance error handling and validation in api_controller.ex
@khushal-winner khushal-winner force-pushed the feat/rate-limiting-atomic-operations branch from 03589ed to de23b62 Compare March 22, 2026 13:23
@khushal-winner
Copy link
Copy Markdown
Contributor Author

khushal-winner commented Mar 22, 2026

@sydseter , is everything clear for merging?

@sydseter
Copy link
Copy Markdown
Collaborator

sydseter commented Apr 8, 2026

@khushal-winner The test coverage has gone down. Please make sure it's higher then on master: https://github.com/OWASP/cornucopia/actions/runs/24130754439/job/70406497565

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants