Jakob Borg dd90e8ec7a fix(api): limit size of allowed authentication request (#10386) ...

We have a slightly naive io.ReadAll on the authentication handler, which
can result in unlimited memory consumption from an unauthenticated API
endpoint. Add a reasonable limit there.

Signed-off-by: Jakob Borg <jakob@kastelo.net>

2025-09-11 10:11:29 +00:00

..

auto

all: Remove usage of deprecated io/ioutil (#7971)

2021-11-22 08:59:47 +01:00

testdata

chore: remove weak hashing which does not pull its weight (#10005)

2025-03-29 13:21:10 +01:00

api_auth_test.go

chore(db): cleanup DB in tests and remove OpenTemp (#10282)

2025-08-24 09:58:56 +00:00

api_auth.go

fix(api): limit size of allowed authentication request (#10386)

2025-09-11 10:11:29 +00:00

api_csrf.go

Merge branch 'main' into v2

2025-04-13 09:44:09 +02:00

api_statics.go

feat: switch logging framework (#10220)

2025-08-07 11:19:36 +02:00

api_test.go

chore(db): cleanup DB in tests and remove OpenTemp (#10282)

2025-08-24 09:58:56 +00:00

api.go

chore: remove GUI "debugging" toggle, debug HTTP metrics (#10235)

2025-08-10 21:14:25 +02:00

confighandler.go

feat: switch logging framework (#10220)

2025-08-07 11:19:36 +02:00

debug.go

feat: switch logging framework (#10220)

2025-08-07 11:19:36 +02:00

mocked_config_test.go

lib: Use counterfeiter to mock interfaces in tests (#7375)

2021-03-03 08:53:50 +01:00

support_bundle.go

fix(api): redact device encryption passwords in support bundle config (#10359)

2025-09-04 18:22:59 +00:00

tokenmanager.go

feat: switch logging framework (#10220)

2025-08-07 11:19:36 +02:00