From 0be5c06497b69812a971120593c0d9ac6e03ad64 Mon Sep 17 00:00:00 2001
From: Lennart kats <lennart@c9.io>
Date: Fri, 15 Apr 2016 14:39:48 +0000
Subject: [PATCH] Rate limit preview per username

---
 plugins/c9.preview/preview.js | 3 ++-
 1 file changed, 2 insertions(+), 1 deletion(-)

diff --git a/plugins/c9.preview/preview.js b/plugins/c9.preview/preview.js
index 0f2c1a98..0169266c 100644
--- a/plugins/c9.preview/preview.js
+++ b/plugins/c9.preview/preview.js
@@ -20,7 +20,7 @@ define(function(require, exports, module) {
         var handler = imports["preview.handler"];
         var userContent = imports["user-content.redirect"];
         var getVfsServers = imports["vfs.serverlist"].getServers;
-        
+        var ratelimit = require("c9/ratelimit");
         
         var frontdoor = require("frontdoor");
         var error = require("http-error");
@@ -52,6 +52,7 @@ define(function(require, exports, module) {
         }, [
             requestTimeout(15*60*1000),
             require("./lib/middleware/sanitize-path-param"),
+            ratelimit("username", 10 * 1000, 2000),
             handler.getProjectSession(),
             handler.getRole(db),
             handler.getProxyUrl(function() {