Files
tailscale/derp/derphttp
Pawel Rutkowski 73b4c49b88 derp/derphttp: bound response body read on non-101 upgrade response (#21980)
connect read a non-101 response body with an unbounded io.ReadAll and
inlined it into the returned error.

* Cap the read, format resp.Status instead of the always-nil err, and use %q.
* Add a regression test for the bound

Updates: tailscale/corp#50441

Change-Id: Ie35fada982ccda4328fd4e9adb795947dee3a283
Signed-off-by: Pawel Rutkowski <pawel@tailscale.com>
2026-10-26 19:47:59 -05:00
..