imazzeii
Results
3
comments of
imazzeii
if RedisRateLimiter.getKeys is turned into an instance method it could be easily overriden (edit) the key should include redis namespace if session is persisted on redis

this issue only occurs when redis is not binded to a specific ip address