zulip

Commit Graph

Author	SHA1	Message	Date
Anders Kaseorg	a50eb2e809	mypy: Enable new error explicit-override. Signed-off-by: Anders Kaseorg <anders@zulip.com>	2023-10-12 12:28:41 -07:00
Anders Kaseorg	5fb935bf60	python: Replace deprecated urllib3 BACKOFF_MAX. Signed-off-by: Anders Kaseorg <anders@zulip.com>	2022-01-23 22:14:17 -08:00
Anders Kaseorg	ee71650908	python: Replace requests.packages.urllib3 alias with urllib3. requests stopped vendoring urllib3 in 2.16.0 (2017-05-26). Signed-off-by: Anders Kaseorg <anders@zulip.com>	2022-01-23 22:14:17 -08:00
BIKI DAS	c46dae64a8	management: Add missing self argument to handle method.	2022-01-11 15:25:29 -08:00
Alex Vandiver	49ad188449	rate_limit: Add a flag to lump all TOR exit node IPs together. TOR users are legitimate users of the system; however, that system can also be used for abuse -- specifically, by evading IP-based rate-limiting. For the purposes of IP-based rate-limiting, add a RATE_LIMIT_TOR_TOGETHER flag, defaulting to false, which lumps all requests from TOR exit nodes into the same bucket. This may allow a TOR user to deny other TOR users access to the find-my-account and new-realm endpoints, but this is a low cost for cutting off a significant potential abuse vector. If enabled, the list of TOR exit nodes is fetched from their public endpoint once per hour, via a cron job, and cached on disk. Django processes load this data from disk, and cache it in memcached. Requests are spared from the burden of checking disk on failure via a circuitbreaker, which trips of there are two failures in a row, and only begins trying again after 10 minutes.	2021-11-16 11:42:00 -08:00

5 Commits