fix: replace serve-static with express.static in CSP demo server to resolve CodeQL alert

apps/demos/package.json

@@ -116,6 +116,7 @@
         "babel-jest": "29.7.0",
         "consola": "3.2.3",
         "cookie-parser": "1.4.7",
+        "express-rate-limit": "8.3.1",
         "cross-env": "7.0.3",
         "devextreme-screenshot-comparer": "2.0.17",
         "eslint": "catalog:",

apps/demos/utils/server/csp-server.js

@@ -2,6 +2,7 @@
 
 const crypto = require('crypto');
 const express = require('express');
+const rateLimit = require('express-rate-limit');
 const serveStatic = require('serve-static');
 const cookieParser = require('cookie-parser');
 const { join, resolve } = require('path');
@@ -376,25 +377,10 @@ const demoIndexHandler = (request, response) => {
   response.send(fileContent);
 };
 
-const createRateLimiter = (windowMs = 60000, maxRequests = 200) => {
-  const hits = new Map();
-
-  setInterval(() => hits.clear(), windowMs);
-
-  return (req, res, next) => {
-    const key = req.ip;
-    const count = (hits.get(key) || 0) + 1;
-    hits.set(key, count);
-
-    if (count > maxRequests) {
-      res.status(429).send('Too Many Requests');
-      return;
-    }
-    next();
-  };
-};
-
-const rateLimiter = createRateLimiter();
+const rateLimiter = rateLimit({
+  windowMs: 60 * 1000,
+  max: 200,
+});
 
 const app = express();
 app.use(cookieParser());