Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

feat(httpclientx): allow configuring max-response-body size #1588

Merged
merged 91 commits into from
May 3, 2024

Conversation

bassosimone
Copy link
Contributor

@bassosimone bassosimone commented May 3, 2024

While removing httpapi in #1560, I noticed that I actually liked limiting the max body size, which is particularly useful in case of gzip bombs. So, add tests for gzip bombs and allow configuring the maximum body size. We detect truncation by reading one more byte than needed and then checking the body length.

Part of ooni/probe#2729.

This diff includes a first attempt at consolidating the patterns with
which we invoke OONI and third-party API calls.

I have refactored the code of httpx and httpapi into a new package
called httpclientx, added some tests, started converting some parts
of the tree, and explained myself in a design document.

Part of ooni/probe#2700
Spotted thanks to a very paranoid check inside ./internal/oonirun.

Was not a problem before for `httpx` because of its usage pattern and may
or may not be a problem for the `httpapi` package (did not check since
this work is focused on replacing both `httpx` and `httpapi`).
Previously, we were gracefully handling this case, but honestly it is
not the best approach to pretend there's an empty structure if the server
breaks the API and returns `"null"` rather than an object.

That said, it was still awesome to have this test in place because it
helped us to figure out this extra condition of which httpclientx should
be aware and that this problem needs to be dealt with systematically
inside the httpclientx package.
Conflicts:
	internal/enginelocate/cloudflare.go
	internal/enginelocate/ubuntu.go
Conflicts:
	internal/oonirun/v2_test.go
As before, here I am going to ensure there's redundancy.
@bassosimone bassosimone changed the title Issue/2729b feat(httpclientx): allow configuring max-response-body size May 3, 2024
@bassosimone bassosimone marked this pull request as ready for review May 3, 2024 13:29
@bassosimone bassosimone requested a review from hellais as a code owner May 3, 2024 13:29
@bassosimone bassosimone merged commit 7ab645d into master May 3, 2024
19 checks passed
@bassosimone bassosimone deleted the issue/2729b branch May 3, 2024 13:38
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
1 participant