CB/feat: Simple rate limiting for issues

CB/feat: Make dirty rate limiting more flexible (Otto)

Author: ashimokawa

models/issues/comment.go

@@ -12,6 +12,7 @@ import (
 	"regexp"
 	"strconv"
 	"strings"
+	"time"
 	"unicode/utf8"
 
 	"code.gitea.io/gitea/models/db"
@@ -792,6 +793,14 @@ func (c *Comment) LoadPushCommits(ctx context.Context) (err error) {
 // CreateCommentCtx creates comment with context
 func CreateCommentCtx(ctx context.Context, opts *CreateCommentOptions) (_ *Comment, err error) {
 	e := db.GetEngine(ctx)
+	// codeberg-specific
+	if opts.Type == CommentTypeComment {
+		count, _ := e.Table("comment").Where("poster_id = ?", opts.Doer.ID).And("created_unix>?", time.Now().Unix()-120).And("type=0").Count(&Comment{})
+		if count > 10 {
+			return nil, fmt.Errorf("NewComment: Rate Limited " + opts.Doer.Name)
+		}
+	}
+
 	var LabelID int64
 	if opts.Label != nil {
 		LabelID = opts.Label.ID

models/issues/issue.go

@@ -12,6 +12,7 @@ import (
 	"sort"
 	"strconv"
 	"strings"
+	"time"
 
 	"code.gitea.io/gitea/models/db"
 	"code.gitea.io/gitea/models/foreignreference"
@@ -965,6 +966,12 @@ type NewIssueOptions struct {
 // NewIssueWithIndex creates issue with given index
 func NewIssueWithIndex(ctx context.Context, doer *user_model.User, opts NewIssueOptions) (err error) {
 	e := db.GetEngine(ctx)
+	// codeberg specific
+	count, err := e.Table("issue").Where("poster_id = ?", doer.ID).And("created_unix>?", time.Now().Unix()-180).Count(new(Issue))
+	if count > 6 {
+		return fmt.Errorf("NewIssue: Rate Limited" + doer.Name)
+	}
+
 	opts.Issue.Title = strings.TrimSpace(opts.Issue.Title)
 
 	if opts.Issue.MilestoneID > 0 {