Rate Limiting

Rate limiting caps API requests per time period (e.g., 100/minute). For QR code generation APIs, exceeding limits returns HTTP 429 errors. Mitigations: batch pre-generation, caching identical QR codes, and client-side JavaScript generation to avoid API calls entirely.