Rate-limiting a SP API
Options
- Mark as New
- Bookmark
- Subscribe
- Mute
- Subscribe to RSS Feed
- Permalink
- Report Inappropriate Content
an hour ago
Hi All,
My custom Service Portal is going through a pen-testing phase.
Pen-testers found that they can spam "/api/now/sp/rectangle/<sys_id>?id=<widget_name>" and get 201's.
Trying to apply Rate-limit in the platform was not successful as this resource "/api/now/sp" is missing and cannot be selected.
How can I apply rate-limit for it for both authenticated and unauthenticated users?
How ServiceNow handles rate-limiting?
Labels:
- Labels:
-
Architect
0 REPLIES 0
