Skip to content
English
  • There are no suggestions because the search field is empty.

How does Edgescan perform testing for lack of resources and rate limiting?

Edgescan includes rate limiting tests in all API testing.

Version Number: v1.0.1

Published Date: 9 Apr 2024

____________________________________________________________________________

Resource and rate limiting is performed as one of the final stages of the scan in which case a PUT or POST request is detected and the request is issued with a short delay a specific number of times to view the response if a restriction or block happens. We do not perform a lack of resource test as this performs a denial of service by exceeding the API’s processing speed and draining the resources creating a clog, this is commonly abused by malicious users using archived files to create a ZIP bomb. On request, it is possible for Edgescan to test this, but a UAT/preprod environment is recommended.