POST /users/:nickname/outbox had no rate limiter, so a client could send unlimited activities through the C2S API. Apply :statuses_actions to update_outbox. RateLimiter keys buckets by limiter name and user, so the outbox shares one counter with the Mastodon API status actions and mixing both APIs does not double the limit. |
||
|---|---|---|
| .. | ||
| mix | ||
| pleroma | ||