-
Notifications
You must be signed in to change notification settings - Fork 1
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Protect ACLED API #76
Comments
This is not technically feasible. Our website will be called from the browser of the clients, at many different IPs, and we have to send the data to them to display it. We could check information such as the HTTP header, and there's (commercial) tool to block people who "abuse" an API (e.g. bundeshaushalt.de uses one), but then there's cheap tools to circumvene those. Still, we could setup CORS and browser detection to show our good intent. |
Moreover, from the ACLED Terms of Use:
In summary:
|
These are great points. Unfortunate from a design perspective but absolutely important! I've added a ticket for this #86 |
No description provided.
The text was updated successfully, but these errors were encountered: