-
-
Notifications
You must be signed in to change notification settings - Fork 1
Open
Description
Overview
Investigate adding protection against large request bodies to prevent potential DoS attacks in the ParseRequest function.
Details
- Consider implementing http.MaxBytesReader with a configurable size limit (suggested 1MB)
- Evaluate the appropriate size limit for the use case
- Consider making the limit configurable
References
- PR Discussion: feat: RFC 9457 compatible #10
- Original suggestion: feat: RFC 9457 compatible #10 (comment)
Impact
Adding this protection would help prevent:
- Memory exhaustion from large payloads
- Potential DoS attacks
- Unnecessary resource consumption
Metadata
Metadata
Assignees
Labels
No labels