Limit reading bytes instead of ReadAll (#35928)

[GiteaBot]

Backport #35928 by wxiaoguang

[delvh]

It does sound a little bit strange to me to backport a possibly breaking change for users.

[wxiaoguang]

It does sound a little bit strange to me to backport a possibly breaking change for users.

How does it break?

And it indeed is a "security fix" to avoid DoS attack.

[delvh]

Let's assume you had a large workflow file.
You do a minor version upgrade and suddenly it doesn't work as intended anymore.

[wxiaoguang]

Let's assume you had a large workflow file. You do a minor version upgrade and suddenly it doesn't work as intended anymore.

Why a workflow file can be that large?

[delvh]

I don't know, humans are strange.
The chance of anyone being affected is really low, but it is not 0.

[wxiaoguang]

Hmm, let's wait and see. I will handle related issue reports.