github / github/codeql

LGTM.com - false positive

Open
#9,810 1 comment 0 reactions 0 assignees View on GitHub
false-positive
Dominant language
CodeQL
Stars
10.1k
Forks
2.1k
Avg merge
2d 15h
Merged PRs (30d)
141

Description

**This route handler performs [authorization] but is not rate-limited, while it is.**

The request is rate limited, while LGTM thinks it is not. As you see above the export there is a `app.use('/api/createMerchant', payLimiter)`, and the payLimiter is created on the index.js file.
**URL to the alert on the project page on LGTM.com**
https://lgtm.com/projects/g/imalfect/VitePay/snapshot/af27317a55f197470a9a3145a6a75f4dcf5a92b0/files/src/routers/createAPIKey.js#xa7d8b094a3bcd4d5:1

Contributor guide

Open the contributing guide

Assessment

This issue has not been assessed yet.

Get new issues in your inbox

A short digest of beginner-friendly GitHub issues.