Add Uncontrolled Resource Consumption security mitigation to http server

antekresic · antekresic · commit 45224159ebda · 2022-06-14T11:36:23.000+02:00
diff --git a/pkg/runner/runner.go b/pkg/runner/runner.go
@@ -273,6 +273,8 @@ func Run(cfg *Config) error {
 	server := http.Server{
 		Addr:    cfg.ListenAddr,
 		Handler: mux,
+		// Uncontrolled Resource Consumption security mitigation.
+		ReadHeaderTimeout: 60 * time.Second,
 	}
 	group.Add(
 		func() error {

Original file line number	Diff line number	Diff line change
`@@ -273,6 +273,8 @@ func Run(cfg *Config) error {`
`273`	`273`	`server := http.Server{`
`274`	`274`	`Addr: cfg.ListenAddr,`
`275`	`275`	`Handler: mux,`
	`276`	`+ // Uncontrolled Resource Consumption security mitigation.`
	`277`	`+ ReadHeaderTimeout: 60 * time.Second,`
`276`	`278`	`}`
`277`	`279`	`group.Add(`
`278`	`280`	`func() error {`