From 9c1ffcfd969a740ba174b44006d498463b752dfd Mon Sep 17 00:00:00 2001 From: Bob Qiu Date: Thu, 8 Oct 2026 15:07:58 +0800 Subject: [PATCH] Potential fix for pull request finding 'CodeQL / Resource exhaustion' Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com> --- packages/insomnia-test/misc/event-stream-server.js | 3 +++ 1 file changed, 3 insertions(+) diff --git a/packages/insomnia-test/misc/event-stream-server.js b/packages/insomnia-test/misc/event-stream-server.js index 9b0e19f87a..20347e8219 100644 --- a/packages/insomnia-test/misc/event-stream-server.js +++ b/packages/insomnia-test/misc/event-stream-server.js @@ -12,8 +12,11 @@ const HTTPS_OPTIONS = { }; const MAX_REPLY_DELAY_MS = 60_000; +const REPLY_DELAY_OPT_IN_HEADER = 'x-allow-reply-delay'; +const REPLY_DELAY_OPT_IN_VALUE = '1'; function delayResponse(req) { + if (req.headers[REPLY_DELAY_OPT_IN_HEADER] !== REPLY_DELAY_OPT_IN_VALUE) return Promise.resolve(); const requestedDelayMs = Number(req.headers['x-reply-delay-ms']); if (!Number.isFinite(requestedDelayMs) || requestedDelayMs <= 0) return Promise.resolve(); const safeDelayMs = Math.min(Math.trunc(requestedDelayMs), MAX_REPLY_DELAY_MS);