aykhans/sarin
1
0 Fork 0
mirror of https://github.com/aykhans/sarin.git synced 2026-10-17 14:53:52 +00:00
Code Issues Packages Projects Releases Wiki Activity
507 Commits 6 Branches 33 Tags
1956eb1c442097939d733bd6c54babde0f855a54
Commit Graph
5 Commits
Author SHA1 Message Date
aykhans 1956eb1c44 fix(script): enforce script body limits without streaming 
Streaming accepted a chunked body cut at a chunk boundary as complete,
so the limit now comes from the client that reads the body, picked per
requested size. Script requests keep their own default, maxBodySize
accepts sizes like 10MiB, and files sarin downloads for itself are
capped at 64MiB.
 2026-09-29 00:41:48 +04:00
aykhans f1d91e3d77 feat: limit response body sizes 
fasthttp allocates the body from the declared Content-Length before
reading it, so a server could exhaust memory by declaring a size it
never sends. The new max response body config bounds every response,
defaults to 10MiB and accepts sizes like 10MiB or 2MB. Scripts get the
same as a maxBodySize option on http().
 2026-09-28 22:49:39 +04:00
aykhans 878ca6dfbd fix(script): bound maxRedirects to 100 and reject out of range values 2026-09-24 19:08:58 +04:00
aykhans 529420ee5a feat(script): replace followRedirects with maxRedirects http option 2026-09-20 23:18:21 +04:00
aykhans 8b437b487c feat(script): add http() and json to Lua and JS scripts 2026-09-20 23:02:51 +04:00