DOS attack about swagger-stats HOT 4 OPEN

Very valid point, this is the scenario to be addressed by #15

Q: Why not simply make req.sws.api_path an empty string in this scenario? Or even skip detailed statistics for such requests?

Main reason is that I wanted not to lose any information about requests coming in, even if request is not specified in swagger or matches express route. Perhaps that could be made optional as well, i.e. introduce option that would enable setting single api_path for such requests, like "unknown"

from swagger-stats.

I believe that you can now prevent this by using swaggerOnly=false option.

edit: oops I meant swaggerOnly=true

from swagger-stats.

hi, @briankinney
you mean swaggerOnly = true?

from swagger-stats.

Yes I did mean that. Thanks for correcting.

from swagger-stats.