fix(security): close DDoS vulnerability in eth tx consistenty strategy

Fixes hyperledger#2001 Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
aldousalvarez · Jul 16, 2022 · d8b31ff · d8b31ff
1 parent a5303ed
commit d8b31ff
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-besu/src/main/json/openapi.json b/packages/cactus-plugin-ledger-connector-besu/src/main/json/openapi.json
@@ -369,6 +369,7 @@
                     "blockConfirmations": {
                         "type": "integer",
                         "minimum": 0,
+                        "maximum": 20000,
                         "description": "The number of blocks to wait to be confirmed in addition to the block containing the transaction in question. Note that if the receipt type is set to only wait for node transaction pool ACK and this parameter is set to anything, but zero then the API will not accept the request due to conflicting parameters."
                     }
                 }

diff --git a/packages/cactus-plugin-ledger-connector-xdai/src/main/json/openapi.json b/packages/cactus-plugin-ledger-connector-xdai/src/main/json/openapi.json
@@ -34,6 +34,7 @@
                     "blockConfirmations": {
                         "type": "integer",
                         "minimum": 0,
+                        "maximum": 20000,
                         "description": "The number of blocks to wait to be confirmed in addition to the block containing the transaction in question. Note that if the receipt type is set to only wait for node transaction pool ACK and this parameter is set to anything, but zero then the API will not accept the request due to conflicting parameters."
                     },
                     "pollIntervalMs" : {