Is there a way to disable json servlet for some nodes?

For example, I can think of DDoS for sling applications:
http://www.example.com/content/dam.tidy.-1.json
http://www.example.com/content/dam.tidy.-2.json
...
http://www.example.com/content/dam.acl.-1.json
http://www.example.com/content/dam.acl.-2.json
...
http://www.example.com/content/dam.eacl.-1.json
http://www.example.com/content/dam.eacl.-2.json
...
in parallel..
where /content/dam is a very deep hierarchy.

I see live sites accepting such GET requests (for example, adobe.com).

How do you partially disable json servlet? (be it only selected nodes accept
json request.. or maybe set a limit on json "level" selector?)

Thanks.
Sam

Reply via email to