Skip to content
This repository has been archived by the owner on Jun 26, 2023. It is now read-only.

Start https server with defined timeout values #293

Merged
merged 1 commit into from
Nov 14, 2022

Conversation

jbygdell
Copy link
Contributor

@jbygdell jbygdell commented Nov 8, 2022

HTTP timeouts are necessary to expire inactive connections and failing to do so might make the application vulnerable to attacks like slowloris which work by sending data very slow, which in case of no timeout will keep the connection active eventually leading to a denial-of-service (DoS) attack. (CWE-400)

@jbygdell jbygdell requested a review from a team November 8, 2022 12:22
@jbygdell jbygdell self-assigned this Nov 8, 2022
Copy link
Contributor

@aaperis aaperis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

good catch!

@dbampalikis dbampalikis merged commit 7304424 into master Nov 14, 2022
@dbampalikis dbampalikis deleted the http_server_with_timeout branch November 14, 2022 07:25
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

4 participants