divviup / divviup-api / 24149290927

69%

push

github

Limit HTTP request body size to 1 MiB (#2182)

The default trillium received body max length is 500 MiB, which is far
too large for this JSON API. Set it to 1 MiB via HttpConfig to prevent
memory exhaustion from oversized request bodies.

Note: The TestConn bypasses the transport layer, so HttpConfig limits won't apply in tests.
A test for this would require setting up a real TCP server, which is kinda heavy for a config
change.

0 of 1 new or added line in 1 file covered. (0.0%)

3883 of 6945 relevant lines covered (55.91%)

60.43 hits per line