fix potential Slowloris vulnerability

w3irdrobot · Jun 16, 2023 · 5b104a4 · 5b104a4
1 parent bb454ee
commit 5b104a4
Showing 1 changed file with 7 additions and 2 deletions.
diff --git a/main.go b/main.go
@@ -12,7 +12,8 @@ import (
 )
 
 const (
-	shutdownTimeout = 5 * time.Second
+	shutdownTimeout   = 5 * time.Second
+	readHeaderTimeout = 20 * time.Second
 )
 
 func main() {
@@ -22,7 +23,11 @@ func main() {
 	}
 
 	router := http.NewServeMux()
-	server := &http.Server{Addr: cfg.address, Handler: router}
+	server := &http.Server{
+		Addr:              cfg.address,
+		Handler:           router,
+		ReadHeaderTimeout: readHeaderTimeout,
+	}
 	appCtx, appCancel := context.WithCancel(context.Background())
 
 	router.Handle("/", newHandler(appCtx, cfg.webhookSecret, cfg.nodeAPI, cfg.walletPassword))