golib/net/formmailer
AJ ONeal 06e6cfa211
fix(formmailer): cap request body with MaxBytesReader
ParseMultipartForm(maxFormSize) caps post-header bytes but doesn't
bound the raw body transfer, so a slow/chunked POST can burn server
time before rejection. Wrap r.Body in http.MaxBytesReader so the
transport cuts off over-size bodies immediately.
2026-04-20 20:02:41 -06:00
..