Merge pull request #689 from favicode/fix/rate-limiting

Rate limiting improvement

Author: vvuksan

.github/workflows/code_quality.yml

@@ -89,12 +89,6 @@ jobs:
             php: "8.2"
             composer: "v2"
             opensearch: "2.5.0"
-
-          - magento: "2.4.6"
-            php: "8.3"
-            composer: "v2"
-            opensearch: "2.5.0"
-
     steps:
       - name: Setup PHP
         uses: shivammathur/setup-php@v2

Model/FrontControllerPlugin.php

@@ -135,7 +135,7 @@ public function aroundDispatch(FrontControllerInterface $subject, callable $proc
             return $proceed(...$args);
         }
 
-        $path = strtolower($this->request->getPathInfo());
+        $path = strtolower($this->request->getRequestUri());
 
         if ($isRateLimitingEnabled && $this->sensitivePathProtection($path)) {
             return $this->response;
@@ -167,7 +167,8 @@ private function sensitivePathProtection($path)
 
         $limit = false;
         foreach ($limitedPaths as $key => $value) {
-            if (preg_match('{' . $value->path . '}i', $path) == 1) {
+            $value->path = str_replace("#", "\#", $value->path);
+            if (preg_match('#' . $value->path . '#i', $path)) {
                 $limit = true;
                 break;
             }