We are looking for option to:

• Allow specific domain checking for email address when sending email
• Limit number of emails within a short period of time

Currently it is possible for a user to spam or send a large number of e-mails to anyone using the REST API.

• Add arbitrary recipients email ids
• Send a large number of e-mails within a short period of time

curl -s -H "Authorization: Bearer <Token>" POST --url https://<base-url>/rest/share-page/latest/share --header 'Content-Type: application/json' --data '{ "users": [], "emails": [], "groups": [], "note": "visit https://test.com", "entityId": "<PageID>", "entityType": "" }'

We are looking for an option to Confluence administrators to restrict it from application side.