From 1c4babeca1d95a37c407aeb085e74322ef1790ac Mon Sep 17 00:00:00 2001
From: Matthew Davis <matthew@matthewdavis.io>
Date: Wed, 13 Feb 2019 20:52:34 -0500
Subject: [PATCH 1/2] Added limit to body size

Without this limit you're susceptible to DDoS attacks.
---
 server.js | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/server.js b/server.js
index 0543cea..f95e83e 100644
--- a/server.js
+++ b/server.js
@@ -9,8 +9,14 @@ const port = process.env.PORT || 3000;
 const app = express();
 
 app.use(express.static(__dirname + '/client/dist'));
+
+//
+// Limit the body size
+//
+app.use(bodyParser.urlencoded({limit: '50mb', extended: true}));
 app.use(bodyParser.json({
   strict: false,
+  limit: '50mb
 }));
 app.use(cors());
 
@@ -32,4 +38,4 @@ app.use((err, req, res) => {
 })
 
 app.listen(port);
-console.log(`Serving at http://localhost:${port}`);
\ No newline at end of file
+console.log(`Serving at http://localhost:${port}`);

From a84ba5cd7c4667644713faf49313666caf64a2ae Mon Sep 17 00:00:00 2001
From: Matthew Davis <matthew@matthewdavis.io>
Date: Wed, 13 Feb 2019 20:52:55 -0500
Subject: [PATCH 2/2] Update server.js

---
 server.js | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/server.js b/server.js
index f95e83e..75b3526 100644
--- a/server.js
+++ b/server.js
@@ -16,7 +16,7 @@ app.use(express.static(__dirname + '/client/dist'));
 app.use(bodyParser.urlencoded({limit: '50mb', extended: true}));
 app.use(bodyParser.json({
   strict: false,
-  limit: '50mb
+  limit: '50mb'
 }));
 app.use(cors());