From 67a406a7540f21aae2fde325c66422cffa27fbfa Mon Sep 17 00:00:00 2001
From: Kegan Dougal <kegan@matrix.org>
Date: Fri, 19 Dec 2014 17:36:33 +0000
Subject: [PATCH] Rate limit display names and avatar urls per request rather
than per event.
---
synapse/handlers/profile.py | 6 ++++--
1 file changed, 4 insertions(+), 2 deletions(-)
diff --git a/synapse/handlers/profile.py b/synapse/handlers/profile.py
index 33a2c167ec..3f11e2dcf4 100644
--- a/synapse/handlers/profile.py
+++ b/synapse/handlers/profile.py
@@ -194,6 +194,8 @@ class ProfileHandler(BaseHandler):
if not self.hs.is_mine(user):
return
+ self.ratelimit(user.to_string())
+
joins = yield self.store.get_rooms_for_user_where_membership_is(
user.to_string(),
[Membership.JOIN],
@@ -214,5 +216,5 @@ class ProfileHandler(BaseHandler):
"room_id": j.room_id,
"state_key": j.state_key,
"content": content,
- "sender": j.state_key,
- })
+ "sender": j.state_key
+ }, ratelimit=False)
--
GitLab