riccardom 7e2b71d7f8 [misc] Bound the upload server's request timeouts ...

http.Server was built with only Addr and Handler, so every timeout was infinite.
Behind a reverse proxy that is survivable because the proxy has its own; serving
TLS directly, which SERVER_CERT_FILE now allows, it means a slow client can hold
a connection and its goroutine indefinitely.

ReadHeaderTimeout and IdleTimeout are short. ReadTimeout is 10 minutes: it has
to clear a 150 MiB upload on a slow link, so it is a ceiling on a stalled
connection rather than a throughput rule. WriteTimeout is deliberately left
unset for the same reason.

Reported by CodeRabbit (CWE-400) on #7514.

2026-09-14 09:20:03 +02:00

..

server

[misc] Bound the upload server's request timeouts

2026-09-14 09:20:03 +02:00

types

[client] Add debug upload option to netbird ui (#3768)

2025-05-01 00:48:31 +02:00

Dockerfile

[misc] improve goreleaser with RC handling and update docker builds (#6438)

2026-06-17 20:13:13 +02:00

main.go

client: container: support CLI with entrypoint addition (#4126)

2025-07-25 11:44:30 +02:00