mirror of
https://github.com/therootcompany/golib.git
synced 2026-04-24 12:48:00 +00:00
ParseMultipartForm(maxFormSize) caps post-header bytes but doesn't bound the raw body transfer, so a slow/chunked POST can burn server time before rejection. Wrap r.Body in http.MaxBytesReader so the transport cuts off over-size bodies immediately.