fix: cap relay tunnel response body size to prevent OOM#28

Merged

cptrodgers merged 1 commit intomainfrom

hn/max-response-body-relay

Mar 30, 2026

Owner

cptrodgers commented Mar 30, 2026

Summary

Add max_response_body_size config option to relay (default 10MB)
Check base64 response body length before decoding; return 502 if oversized
Prevents a malicious/buggy tunnel client from sending arbitrarily large responses through the WebSocket


          max response body for relay

d28b57f

cptrodgers merged commit d412c45 into main

1 check passed

cptrodgers deleted the hn/max-response-body-relay branch

March 30, 2026 03:14

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet