Added IP-based rate limiting for Copi (fixes #1877) #1998

immortal71 · 2026-01-02T08:38:41Z

Implemented separate IP-based rate limits for game creation, player creation, and WebSocket connections to protect against CAPEC-212 (Functionality Misuse) attacks and ensure service availability.

Changes:

Implemented Copi.RateLimiter GenServer for tracking rate limits per IP
Added separate rate limiting for:
- Game creation: 10 per IP per hour
- Player creation: 20 per IP per hour
- Connections: 50 per IP per 5 minutes
Created shared IPHelper module for DRY IP extraction
Moved configuration to runtime.exs for proper env var handling
Removed 'unknown' IP fallback for security (raises error instead)
Adds comprehensive tests and SECURITY.md documentation

Addressed feedback from PR #1920:

Config moved to runtime.exs
Refactored duplicated get_connect_ip/1
Removed 'unknown' IP security issue

#1920

Implemented separate IP-based rate limits for game creation, player creation, and WebSocket connections to protect against CAPEC-212 (Functionality Misuse) attacks and ensure service availability. Changes: - Implemented Copi.RateLimiter GenServer for tracking rate limits per IP - Added separate rate limiting for: * Game creation: 10 per IP per hour * Player creation: 20 per IP per hour * Connections: 50 per IP per 5 minutes - Created shared IPHelper module for DRY IP extraction - Moved configuration to runtime.exs for proper env var handling - Removed 'unknown' IP fallback for security (raises error instead) - Adds comprehensive tests and SECURITY.md documentation Addressed feedback from PR OWASP#1920: - Config moved to runtime.exs - Refactored duplicated get_connect_ip/1 - Removed 'unknown' IP security issue OWASP#1920

immortal71 · 2026-01-02T08:44:32Z

@sydseter waiting for your review !!

Copilot

Pull request overview

This PR implements IP-based rate limiting to protect against CAPEC-212 (Functionality Misuse) attacks. However, there are several critical issues that prevent the feature from working correctly and compromise its security effectiveness.

Key Changes:

Added Copi.RateLimiter GenServer to track rate limits per IP address across three action types (game creation, player creation, connections)
Created CopiWeb.Helpers.IPHelper module to extract IP addresses from LiveView sockets
Integrated rate limiting checks into game creation, player creation, and WebSocket connection flows

Reviewed changes

Copilot reviewed 9 out of 10 changed files in this pull request and generated 12 comments.

Show a summary per file

File	Description
copi.owasp.org/lib/copi/rate_limiter.ex	Implements GenServer for tracking IP-based rate limits with configurable thresholds and time windows
copi.owasp.org/lib/copi_web/helpers/ip_helper.ex	Extracts IP addresses from LiveView socket connections for rate limiting
copi.owasp.org/lib/copi/application.ex	Adds RateLimiter to application supervision tree
copi.owasp.org/lib/copi_web/live/game_live/index.ex	Adds connection rate limiting to mount function
copi.owasp.org/lib/copi_web/live/game_live/create_game_form.ex	Adds game creation rate limiting with user-facing error messages
copi.owasp.org/lib/copi_web/live/player_live/form_component.ex	Adds player creation rate limiting with user-facing error messages
copi.owasp.org/config/runtime.exs	Configures rate limit thresholds via environment variables
copi.owasp.org/test/copi/rate_limiter_test.exs	Comprehensive test suite for rate limiter functionality
copi.owasp.org/SECURITY.md	Documents rate limiting configuration and security policies
copi.owasp.org/mix.lock	Removes depth limitation from heroicons git dependency (unrelated change)

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

copi.owasp.org/SECURITY.md

copi.owasp.org/lib/copi_web/live/player_live/form_component.ex

Copilot · 2026-01-02T08:45:43Z

copi.owasp.org/lib/copi_web/live/game_live/index.ex

+    case Copi.RateLimiter.check_rate(ip_address, :connection) do
+      {:ok, _remaining} ->
+        if connected?(socket) do
+          Phoenix.PubSub.subscribe(Copi.PubSub, "games")
+        end
+
+        {:ok, assign(socket, games: list_games())}


Connection rate limit is not enforced. The code checks the rate limit but never calls record_action for the connection action type, which means the connection count never increases and the limit can never be reached. After the check passes, you should call Copi.RateLimiter.record_action(ip_address, :connection) to actually track the connection attempt.

Why aren't you calling record_action?

copi.owasp.org/test/copi/rate_limiter_test.exs

Copilot · 2026-01-02T08:45:44Z

copi.owasp.org/test/copi/rate_limiter_test.exs

+    test "allows requests after window expires" do
+      ip = "192.168.100.1"
+
+      # This test would require waiting for the window to expire
+      # In a real scenario, you might want to use a mock timer or 
+      # make the window configurable for testing
+
+      assert {:ok, _remaining} = RateLimiter.check_rate(ip, :game_creation)
+      RateLimiter.record_action(ip, :game_creation)
+
+      # Verify request was recorded
+      assert {:ok, _remaining} = RateLimiter.check_rate(ip, :game_creation)
+    end


Test doesn't validate its stated purpose. This test claims to verify that "requests are allowed after window expires" but it doesn't actually wait for any time window to expire. The test only verifies that two consecutive requests are allowed, which is already covered by other tests. Either remove this test or implement proper window expiration testing using techniques mentioned in the comment (e.g., allow injecting a clock/time function for testing).

Please implement what the comment says.

copi.owasp.org/SECURITY.md

copi.owasp.org/lib/copi_web/helpers/ip_helper.ex

Copilot · 2026-01-02T08:45:46Z

copi.owasp.org/lib/copi_web/live/game_live/create_game_form.ex

+    case Copi.RateLimiter.check_rate(ip_address, :game_creation) do
+      {:ok, _remaining} ->
+        case Cornucopia.create_game(game_params) do
+          {:ok, game} ->
+            # Record the action after successful creation
+            Copi.RateLimiter.record_action(ip_address, :game_creation)


Race condition vulnerability: The separation of check_rate and record_action creates a TOCTOU (Time-of-Check-Time-of-Use) issue. Multiple concurrent requests from the same IP could all pass the check_rate call before any of them calls record_action, effectively bypassing the rate limit. For example, if the limit is 10 and there are currently 9 recorded actions, 5 concurrent requests could all check (seeing 9 < 10), all pass, and all record, resulting in 14 total actions. Consider making check_rate atomically record the action when it returns {:ok, _}, or create a check_and_record/2 function that does both operations in a single GenServer call.

copi.owasp.org/config/runtime.exs

copi.owasp.org/lib/copi_web/helpers/ip_helper.ex

- Fixed race conditions by making check_and_record atomic - Added missing connection tracking in mount - Fixed IPv6 formatting using :inet.ntoa - Added :peer_data to endpoint connect_info - Added error handling for invalid env vars - Fixed markdown headers in SECURITY.md - Removed async tests to avoid name conflicts - Removed incomplete window expiration test

immortal71 · 2026-01-02T09:34:00Z

@sydseter waiting for review

Co-authored-by: Copilot <[email protected]>

sydseter · 2026-01-08T08:23:11Z

copi.owasp.org/lib/copi_web/helpers/ip_helper.ex

+defmodule CopiWeb.Helpers.IPHelper do
+  @moduledoc """
+  Helper functions for extracting and formatting IP addresses from socket connections.
+  """
+
+  @doc """
+  Extracts the IP address from a LiveView socket connection.
+  
+  Returns a string representation of the IP address (IPv4 or IPv6).
+  Raises an error if the IP address cannot be determined, as this should never
+  happen in a properly configured backend environment.
+  
+  ## Examples
+  
+      iex> get_connect_ip(socket)
+      "192.168.1.1"
+      
+      iex> get_connect_ip(socket)
+      "2001:db8::1"
+  """
+  def get_connect_ip(socket) do
+    case Phoenix.LiveView.get_connect_info(socket, :peer_data) do
+      %{address: {a, b, c, d}} ->
+        # IPv4 address
+        "#{a}.#{b}.#{c}.#{d}"
+
+      %{address: {a, b, c, d, e, f, g, h}} ->
+        # IPv6 address - format as colon-separated hex
+        [a, b, c, d, e, f, g, h]
+        |> Enum.map(&Integer.to_string(&1, 16))
+        |> Enum.join(":")
+
+      nil ->
+        raise "Unable to determine IP address from socket connection. peer_data is nil."
+
+      other ->
+        raise "Unexpected peer_data format: #{inspect(other)}"
+    end
+  end
+end


We definetly need test coverage on this.

sydseter · 2026-01-08T08:24:57Z

copi.owasp.org/test/copi/rate_limiter_test.exs

@@ -0,0 +1,183 @@
+defmodule Copi.RateLimiterTest do


The test is failing.

Tests are failing. Please ensure that they pass:

..09:15:37.703 [error] GenServer Copi.RateLimiter terminating
** (ArgumentError) could not put/update key :connection on a nil value
(elixir 1.19.2) lib/access.ex:436: Access.get_and_update/3
(elixir 1.19.2) lib/map.ex:965: Map.get_and_update/3
(elixir 1.19.2) lib/kernel.ex:2950: Kernel.put_in/3
(copi 0.1.0) lib/copi/rate_limiter.ex:144: Copi.RateLimiter.handle_call/3
(stdlib 7.1) gen_server.erl:2470: :gen_server.try_handle_call/4
(stdlib 7.1) gen_server.erl:2499: :gen_server.handle_msg/3
(stdlib 7.1) proc_lib.erl:333: :proc_lib.init_p_do_apply/3
Last message (from #PID<0.8256.0>): {:check_and_record, "127.0.0.1", :connection}

test Index saves new game (CopiWeb.GameLiveTest)
test/copi_web/live/game_live_test.exs:31
** (exit) exited in: GenServer.call(Copi.RateLimiter, {:check_and_record, "127.0.0.1", :connection}, 5000)
** (EXIT) an exception was raised:
** (ArgumentError) could not put/update key :connection on a nil value
(elixir 1.19.2) lib/access.ex:436: Access.get_and_update/3
(elixir 1.19.2) lib/map.ex:965: Map.get_and_update/3
(elixir 1.19.2) lib/kernel.ex:2950: Kernel.put_in/3
(copi 0.1.0) lib/copi/rate_limiter.ex:144: Copi.RateLimiter.handle_call/3
(stdlib 7.1) gen_server.erl:2470: :gen_server.try_handle_call/4
(stdlib 7.1) gen_server.erl:2499: :gen_server.handle_msg/3
(stdlib 7.1) proc_lib.erl:333: :proc_lib.init_p_do_apply/3
code: {:ok, index_live, _html} = live(conn, "/games")
stacktrace:
(elixir 1.19.2) lib/gen_server.ex:1142: GenServer.call/3
(copi 0.1.0) lib/copi_web/live/game_live/index.ex:14: CopiWeb.GameLive.Index.mount/3
(phoenix_live_view 1.0.17) lib/phoenix_live_view/utils.ex:348: anonymous fn/6 in Phoenix.LiveView.Utils.maybe_call_live_view_mount!/5
(telemetry 1.3.0) c:/Users/JSydseter/src/cornucopia-test/copi.owasp.org/deps/telemetry/src/telemetry.erl:324: :telemetry.span/3
(phoenix_live_view 1.0.17) lib/phoenix_live_view/static.ex:321: Phoenix.LiveView.Static.call_mount_and_handle_params!/5
(phoenix_live_view 1.0.17) lib/phoenix_live_view/static.ex:155: Phoenix.LiveView.Static.do_render/4
(phoenix_live_view 1.0.17) lib/phoenix_live_view/controller.ex:39: Phoenix.LiveView.Controller.live_render/3
(phoenix 1.8.3) lib/phoenix/router.ex:416: Phoenix.Router.call/5
(copi 0.1.0) lib/copi_web/endpoint.ex:1: CopiWeb.Endpoint.plug_builder_call/2
(copi 0.1.0) lib/copi_web/endpoint.ex:1: CopiWeb.Endpoint.call/2
(phoenix 1.8.3) lib/phoenix/test/conn_test.ex:225: Phoenix.ConnTest.dispatch/5
test/copi_web/live/game_live_test.exs:32: (test)

.09:15:37.808 [error] GenServer #PID<0.8278.0> terminating
** (RuntimeError) attempted to read connect_info outside of CopiWeb.PlayerLive.Index.mount/3.

connect_info only exists while mounting. If you require access to this information
after mount, store the state in socket assigns.

(phoenix_live_view 1.0.17) lib/phoenix_live_view.ex:1338: Phoenix.LiveView.raise_root_and_mount_only!/2 (copi 0.1.0) lib/copi_web/helpers/ip_helper.ex:22: CopiWeb.Helpers.IPHelper.get_connect_ip/1 (copi 0.1.0) lib/copi_web/live/player_live/form_component.ex:79: CopiWeb.PlayerLive.FormComponent.save_player/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:742: anonymous fn/4 in Phoenix.LiveView.Channel.inner_component_handle_event/4 (telemetry 1.3.0) c:/Users/JSydseter/src/cornucopia-test/copi.owasp.org/deps/telemetry/src/telemetry.erl:324: :telemetry.span/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/diff.ex:209: Phoenix.LiveView.Diff.write_component/4 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:663: Phoenix.LiveView.Channel.component_handle/4 (stdlib 7.1) gen_server.erl:2434: :gen_server.try_handle_info/3 (stdlib 7.1) gen_server.erl:2420: :gen_server.handle_msg/3 (stdlib 7.1) proc_lib.erl:333: :proc_lib.init_p_do_apply/3

Last message: %Phoenix.Socket.Message{topic: "lv:phx-GIizbcVqAYCuoFwC", event: "event", payload: %{"cid" => 1, "event" => "save", "type" => "form", "value" => "player[game_id]=01KEEASVRXNZQE49TEV4V3W80F&player[name]=some+updated+name"}, ref: "2", join_ref: 0}
09:15:37.811 [error] GenServer #PID<0.8274.0> terminating
** (RuntimeError) attempted to read connect_info outside of CopiWeb.PlayerLive.Index.mount/3.

connect_info only exists while mounting. If you require access to this information
after mount, store the state in socket assigns.

(phoenix_live_view 1.0.17) lib/phoenix_live_view.ex:1338: Phoenix.LiveView.raise_root_and_mount_only!/2 (copi 0.1.0) lib/copi_web/helpers/ip_helper.ex:22: CopiWeb.Helpers.IPHelper.get_connect_ip/1 (copi 0.1.0) lib/copi_web/live/player_live/form_component.ex:79: CopiWeb.PlayerLive.FormComponent.save_player/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:742: anonymous fn/4 in Phoenix.LiveView.Channel.inner_component_handle_event/4 (telemetry 1.3.0) c:/Users/JSydseter/src/cornucopia-test/copi.owasp.org/deps/telemetry/src/telemetry.erl:324: :telemetry.span/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/diff.ex:209: Phoenix.LiveView.Diff.write_component/4 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:663: Phoenix.LiveView.Channel.component_handle/4 (stdlib 7.1) gen_server.erl:2434: :gen_server.try_handle_info/3 (stdlib 7.1) gen_server.erl:2420: :gen_server.handle_msg/3 (stdlib 7.1) proc_lib.erl:333: :proc_lib.init_p_do_apply/3

Last message: {:EXIT, #PID<0.8272.0>, {%RuntimeError{message: "attempted to read connect_info outside of CopiWeb.PlayerLive.Index.mount/3.\n\nconnect_info only exists while mounting. If you require access to this information\nafter mount, store the state in socket assigns.\n"}, [{Phoenix.LiveView, :raise_root_and_mount_only!, 2, [file: ~c"lib/phoenix_live_view.ex", line: 1338]}, {CopiWeb.Helpers.IPHelper, :get_connect_ip, 1, [file: ~c"lib/copi_web/helpers/ip_helper.ex", line: 22]}, {CopiWeb.PlayerLive.FormComponent, :save_player, 3, [file: ~c"lib/copi_web/live/player_live/form_component.ex", line: 79]}, {Phoenix.LiveView.Channel, :"-inner_component_handle_event/4-fun-0-", 4, [file: ~c"lib/phoenix_live_view/channel.ex", line: 742]}, {:telemetry, :span, 3, [file: ~c"c:/Users/JSydseter/src/cornucopia-test/copi.owasp.org/deps/telemetry/src/telemetry.erl", line: 324]}, {Phoenix.LiveView.Diff, :write_component, 4, [file: ~c"lib/phoenix_live_view/diff.ex", line: 209]}, {Phoenix.LiveView.Channel, :component_handle, 4, [file: ~c"lib/phoenix_live_view/channel.ex", line: 663]}, {:gen_server, :try_handle_info, 3, [file: ~c"gen_server.erl", line: 2434]}, {:gen_server, :handle_msg, 3, [file: ~c"gen_server.erl", line: 2420]}, {:proc_lib, :init_p_do_apply, 3, [file: ~c"proc_lib.erl", line: 333]}]}}

test Index saves new player (CopiWeb.PlayerLiveTest)
test/copi_web/live/player_live_test.exs:33
** (EXIT from #PID<0.8272.0>) an exception was raised:
** (RuntimeError) attempted to read connect_info outside of CopiWeb.PlayerLive.Index.mount/3.

connect_info only exists while mounting. If you require access to this information
after mount, store the state in socket assigns.

(phoenix_live_view 1.0.17) lib/phoenix_live_view.ex:1338: Phoenix.LiveView.raise_root_and_mount_only!/2 (copi 0.1.0) lib/copi_web/helpers/ip_helper.ex:22: CopiWeb.Helpers.IPHelper.get_connect_ip/1 (copi 0.1.0) lib/copi_web/live/player_live/form_component.ex:79: CopiWeb.PlayerLive.FormComponent.save_player/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:742: anonymous fn/4 in Phoenix.LiveView.Channel.inner_component_handle_event/4 (telemetry 1.3.0) c:/Users/JSydseter/src/cornucopia-test/copi.owasp.org/deps/telemetry/src/telemetry.erl:324: :telemetry.span/3 (phoenix_live_view 1.0.17) lib/phoenix_live_view/diff.ex:209: Phoenix.LiveView.Diff.write_component/4 (phoenix_live_view 1.0.17) lib/phoenix_live_view/channel.ex:663: Phoenix.LiveView.Channel.component_handle/4 (stdlib 7.1) gen_server.erl:2434: :gen_server.try_handle_info/3 (stdlib 7.1) gen_server.erl:2420: :gen_server.handle_msg/3 (stdlib 7.1) proc_lib.erl:333: :proc_lib.init_p_do_apply/3

test player creation rate limiting blocks player creation over the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:111
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test connection rate limiting blocks connections over the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:82
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test player creation rate limiting allows player creation under the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:100
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test connection rate limiting allows connections under the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:71
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test IP clearing clears rate limit data for an IP (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:167
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test player creation rate limiting player creation limit is separate from game creation limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:127
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test configuration returns current configuration (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:147
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test game creation rate limiting different IPs have independent limits (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:50
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test game creation rate limiting allows requests under the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:21
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

test game creation rate limiting blocks requests over the limit (Copi.RateLimiterTest)
test/copi/rate_limiter_test.exs:34
** (MatchError) no match of right hand side value:

{:error, {:already_started, #PID<0.8258.0>}}

stacktrace:
test/copi/rate_limiter_test.exs:8: Copi.RateLimiterTest.__ex_unit_setup_0/1
test/copi/rate_limiter_test.exs:1: Copi.RateLimiterTest.ex_unit/2

sydseter

Please have a look at my comments. Thank you for your effort.

Copilot

Pull request overview

Copilot reviewed 10 out of 11 changed files in this pull request and generated 5 comments.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

Copilot · 2026-01-08T08:28:52Z

copi.owasp.org/lib/copi_web/live/game_live/index.ex

+        if connected?(socket) do
+          Phoenix.PubSub.subscribe(Copi.PubSub, "games")
+        end
+
+        {:ok, assign(socket, games: list_games())}


When rate limiting succeeds, list_games() is called but the function is not visible in this diff. The original code assigned nil to games. If list_games/0 doesn't exist in this module, this will cause a compilation error.

Copilot · 2026-01-08T08:28:53Z

copi.owasp.org/lib/copi_web/live/player_live/form_component.ex

+        case Cornucopia.create_player(player_params) do
+          {:ok, player} ->
+            {:ok, updated_game} = Cornucopia.Game.find(socket.assigns.player.game_id)


The nesting creates complex control flow with two levels of case statements. Consider extracting the player creation logic into a separate private function (e.g., do_create_player/2) to improve readability and reduce nesting depth.

Copilot · 2026-01-08T08:28:53Z

copi.owasp.org/lib/copi/rate_limiter.ex

+    if count < config.max_requests do
+      # Atomically record the action before returning success
+      updated_requests = [now | valid_requests]
+      new_requests = put_in(state.requests, [ip_address, action], updated_requests)


Using put_in/3 with a list of keys on a potentially non-existent nested path will raise an error if the IP address key doesn't exist in the map. Use Kernel.put_in/3 or ensure the path exists first, or consider using Map.put/3 with Map.get/3 for safer nested map updates.

copi.owasp.org/config/runtime.exs

Copilot · 2026-01-08T08:28:54Z

copi.owasp.org/lib/copi/rate_limiter.ex

+    new_requests = put_in(
+      state.requests,
+      [ip_address, action],
+      updated_requests
+    )


Similar to the issue in check_and_record, using put_in/3 with a path that may not exist will raise an error. This occurs when recording an action for a new IP address that hasn't been seen before.

Co-authored-by: Copilot <[email protected]>

Copilot AI review requested due to automatic review settings January 2, 2026 08:38

immortal71 requested review from cw-owasp, rewtd and sydseter as code owners January 2, 2026 08:38

Copilot started reviewing on behalf of immortal71 January 2, 2026 08:39 View session

immortal71 mentioned this pull request Jan 2, 2026

Added IP-based rate limiting for Copi (fixes #1877) #1920

Open

Copilot AI reviewed Jan 2, 2026

View reviewed changes

immortal71 force-pushed the feat/rate-limiting-clean branch from 4749354 to 648cfe9 Compare January 2, 2026 09:02

Apply suggestions from code review

202bd91

Co-authored-by: Copilot <[email protected]>

sydseter reviewed Jan 8, 2026

View reviewed changes

sydseter requested changes Jan 8, 2026

View reviewed changes

sydseter requested a review from Copilot January 8, 2026 08:27

Copilot AI reviewed Jan 8, 2026

View reviewed changes

Update copi.owasp.org/config/runtime.exs

01d7577

Co-authored-by: Copilot <[email protected]>

Uh oh!

Added IP-based rate limiting for Copi (fixes #1877) #1998

Are you sure you want to change the base?

Added IP-based rate limiting for Copi (fixes #1877) #1998

Uh oh!

Conversation

immortal71 commented Jan 2, 2026

Uh oh!

immortal71 commented Jan 2, 2026

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Reviewed changes

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 2, 2026

Choose a reason for hiding this comment

Uh oh!

sydseter Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI Jan 2, 2026

Choose a reason for hiding this comment

Uh oh!

sydseter Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

Copilot AI Jan 2, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Uh oh!

immortal71 commented Jan 2, 2026

Uh oh!

sydseter Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

sydseter Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

sydseter left a comment

Choose a reason for hiding this comment

Uh oh!

Copilot AI left a comment

Choose a reason for hiding this comment

Pull request overview

Uh oh!

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Uh oh!

Copilot AI Jan 8, 2026

Choose a reason for hiding this comment

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

2 participants