juice-shop

1
/* Rate limiting */
2
  app.enable('trust proxy')
3
  app.use('/rest/user/reset-password', new RateLimit({
4
    windowMs: 5 * 60 * 1000,
5
    max: 100,
6
    keyGenerator ({ headers, ip }) { return headers['Forwarded'] ?? ip }
7
  }))