juice-shop

1
/* Rate limiting */
2
  app.use('/rest/user/reset-password', new RateLimit({
3
    windowMs: 5 * 60 * 1000,
4
    max: 100,
5
    keyGenerator ({ headers, ip }) { return headers['X-Forwarded-For'] ?? ip }
6
  }))