aykhans/sarin
1
0 Fork 0
mirror of https://github.com/aykhans/sarin.git synced 2026-10-16 14:43:53 +00:00
Code Issues Packages Projects Releases Wiki Activity
520 Commits 6 Branches 33 Tags
9e773a4e6cc590cdb36ee8c397031dab3ace9962
Commit Graph
4 Commits
Author SHA1 Message Date
aykhans 4a14d57d15 fix(config): reject a hidden YAML document and drop Go types from errors 2026-09-30 12:29:00 +04:00
aykhans 633f548e7b fix(config): report YAML config errors more clearly 2026-09-30 01:07:28 +04:00
aykhans 1956eb1c44 fix(script): enforce script body limits without streaming 
Streaming accepted a chunked body cut at a chunk boundary as complete,
so the limit now comes from the client that reads the body, picked per
requested size. Script requests keep their own default, maxBodySize
accepts sizes like 10MiB, and files sarin downloads for itself are
capped at 64MiB.
 2026-09-29 00:41:48 +04:00
aykhans f1d91e3d77 feat: limit response body sizes 
fasthttp allocates the body from the declared Content-Length before
reading it, so a server could exhaust memory by declaring a size it
never sends. The new max response body config bounds every response,
defaults to 10MiB and accepts sizes like 10MiB or 2MB. Scripts get the
same as a maxBodySize option on http().
 2026-09-28 22:49:39 +04:00