Rate-limiting a SP API

Ariel Aharon
Giga Guru

Hi All,

 

My custom Service Portal is going through a pen-testing phase.

Pen-testers found that they can spam "/api/now/sp/rectangle/<sys_id>?id=<widget_name>" and get 201's.

 

Trying to apply Rate-limit in the platform was not successful as this resource "/api/now/sp" is missing and cannot be selected.

 

How can I apply rate-limit for it for both authenticated and unauthenticated users?

How ServiceNow handles rate-limiting?

0 REPLIES 0