Rate-limit on (anonymous) notes? about openstreetmap-website

[tomhughes]

This is a bug tracker, not a place for asking questions - that would probably have been better done on the community thread that you refer to.

I'll assume that we should treat this as a request to add such a limit, though it's a relatively tricky thing to do at the moment due to the strange way notes are modelled in the database - if people want to help with this that the plan outlined in #3831 would be a good start.

[Kovoschiz]

Sorry, Github's issue template included questions as something that can be raised here. Didn't want to @-you or someone, or everyone there in the absence of a team mention. If the forum is preferred, it would be nice if there is a dedicated tag (openstreetmap-website is 1 char too long; https://community.openstreetmap.org/tag/website is not exclusively used for this website) or even subsection. Then it can be redirected from https://github.com/openstreetmap/openstreetmap-website/blob/master/.github/ISSUE_TEMPLATE/config.yml along other channels.
And yes, I hope to see it added as mentioned there. Notes are more managable than destructive changesets, so it can certainly wait if the system has to be overhauled.

[tomhughes]

I wasn't aware when I initially replied that the community thread had already misled people by suggesting there were rate limits.

In general the whole thread is something of an overreaction to one incident that was almost certainly not deliberate and was stopped (by me) after a few hours - as should be fairly obvious from the list that was posted in the thread what likely happened was that some idiot "security researcher" ran a script that was trying injection attacks and they ended up generating lots of notes containing fragments of those attempts precisely because we did not fall victim and correctly escaped them all.