fix(security): close DDoS vulnerability in eth tx consistenty strategy

Fixes hyperledger-cacti#2001 Signed-off-by: aldousalvarez <aldousss.alvarez@gmail.com>
aldousalvarez · Jun 1, 2022 · 55d8d8f · 55d8d8f
1 parent af4cc37
commit 55d8d8f
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 0 deletions.
diff --git a/packages/cactus-plugin-ledger-connector-besu/src/main/json/openapi.json b/packages/cactus-plugin-ledger-connector-besu/src/main/json/openapi.json
@@ -369,6 +369,7 @@
                     "blockConfirmations": {
                         "type": "integer",
                         "minimum": 0,
+                        "maximum": 20000,
                         "description": "The number of blocks to wait to be confirmed in addition to the block containing the transaction in question. Note that if the receipt type is set to only wait for node transaction pool ACK and this parameter is set to anything, but zero then the API will not accept the request due to conflicting parameters."
                     }
                 }

diff --git a/packages/cactus-plugin-ledger-connector-xdai/src/main/json/openapi.json b/packages/cactus-plugin-ledger-connector-xdai/src/main/json/openapi.json
@@ -34,6 +34,7 @@
                     "blockConfirmations": {
                         "type": "integer",
                         "minimum": 0,
+                        "maximum": 20000,
                         "description": "The number of blocks to wait to be confirmed in addition to the block containing the transaction in question. Note that if the receipt type is set to only wait for node transaction pool ACK and this parameter is set to anything, but zero then the API will not accept the request due to conflicting parameters."
                     },
                     "pollIntervalMs" : {