MBO-Tech-IT-Webseite/app/api
MBO-Tech-IT 60af2e1621 fix: add IP rate limiting and guard non-string email in flyer route
Adds an in-memory, IP-based fixed-window rate limit (max 3 req/hour)
to app/api/familyguard-flyer/route.ts to mitigate an email-spam/abuse
vector where any client could trigger outbound emails and DB inserts
with no limit. Also guards against a non-string `email` field in the
request body, which previously threw an uncaught TypeError (HTTP 500)
instead of the intended 400 validation response.

Co-Authored-By: Claude Sonnet 5 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_01LhY1QhDXGWfyhrxaJvfpNt
2026-07-21 14:12:50 +02:00
..
admin feat: set MBO-Tech-IT defaults in hero and add CMS links to admin nav 2026-06-02 20:33:37 +02:00
analytics feat: integrate modules 01–03, 06–07 — email, admin auth, analytics, kunden-portal, statistik 2026-04-27 19:41:05 +02:00
contact feat: send confirmation email to contact form submitter 2026-04-28 09:12:48 +02:00
familyguard-flyer fix: add IP rate limiting and guard non-string email in flyer route 2026-07-21 14:12:50 +02:00
kunden feat: integrate modules 01–03, 06–07 — email, admin auth, analytics, kunden-portal, statistik 2026-04-27 19:41:05 +02:00