From 95995977c2bebfd338bf16ff5ef9f2caadab0ebe Mon Sep 17 00:00:00 2001
From: Ivan Starkov <istarkov@gmail.com>
Date: Sat, 4 Nov 2023 17:43:11 +0200
Subject: [PATCH] fix: Fix image ratelimiting (#2562)

## Description

Image were ratelimited as authorized calls

## Steps for reproduction

1. click button
2. expect xyz

## Code Review

- [ ] hi @kof, I need you to do
  - conceptual review (architecture, feature-correctness)
  - detailed review (read every line)
  - test it on preview

## Before requesting a review

- [ ] made a self-review
- [ ] added inline comments where things may be not obvious (the "why",
not "what")

## Before merging

- [ ] tested locally and on preview environment (preview dev login:
5de6)
- [ ] updated [test
cases](https://github.com/webstudio-is/webstudio/blob/main/apps/builder/docs/test-cases.md)
document
- [ ] added tests
- [ ] if any new env variables are added, added them to `.env.example`
and the `builder/env-check.js` if mandatory
---
 apps/builder/middleware.js | 4 +++-
 1 file changed, 3 insertions(+), 1 deletion(-)

diff --git a/apps/builder/middleware.js b/apps/builder/middleware.js
index ae79babd95..e3994cfda7 100644
--- a/apps/builder/middleware.js
+++ b/apps/builder/middleware.js
@@ -312,7 +312,9 @@ app.use("*", async (ctx, next) => {
 
   ctx.set(
     "skipRateLimit",
-    url.pathname.startsWith("/build/") || url.pathname.endsWith(".ico")
+    url.pathname.startsWith("/assets/") ||
+      url.pathname.startsWith("/build/") ||
+      url.pathname.endsWith(".ico")
   );
   return next();
 });