mirrors/git-pages
1
0
Fork 0
mirror of https://codeberg.org/git-pages/git-pages.git synced 2026-06-10 13:30:49 +00:00
Code Issues Packages Projects Releases Wiki Activity

Limit how long forge API responses can be.

Browse Source 
V12-Ref: F-77222
This commit is contained in:
Catherine
2026-05-30 15:58:11 +00:00
parent bde52a911e
commit 577bd04d53
1 changed files with 7 additions and 3 deletions
Download Patch File Download Diff File Expand all files Collapse all files
src/forge_api.go
+7 -3
View File
@@ -10,6 +10,10 @@ import (
"time"
)
const maxForgeResponseSize = 65536
var errResponseTooLong = errors.New("forge response too long")
func makeGogsAPIRequest(
baseURL *url.URL, authorization string, endpoint string,
) (*http.Request, *http.Response, error) {
@@ -53,7 +57,7 @@ func FetchGogsAuthorizedUser(baseURL *url.URL, authorization string) (*ForgeUser
ID int64 `json:"id"`
Login string `json:"login"`
}
decoder := json.NewDecoder(response.Body)
decoder := json.NewDecoder(ReadAtMost(response.Body, maxForgeResponseSize, errResponseTooLong))
if err := decoder.Decode(&userInfo); err != nil {
return nil, errors.Join(AuthError{
http.StatusServiceUnavailable,
@@ -111,7 +115,7 @@ func CheckGogsRepositoryPushPermission(baseURL *url.URL, authorization string) e
Push bool `json:"push"`
} `json:"permissions"`
}
decoder := json.NewDecoder(response.Body)
decoder := json.NewDecoder(ReadAtMost(response.Body, maxForgeResponseSize, errResponseTooLong))
if err := decoder.Decode(&repositoryInfo); err != nil {
return errors.Join(AuthError{
http.StatusServiceUnavailable,
@@ -183,7 +187,7 @@ func FetchForgejoActionRun(baseURL *url.URL, authorization string) (*ForgeAction
Username string `json:"username"`
} `json:"trigger_user"`
}
decoder := json.NewDecoder(response.Body)
decoder := json.NewDecoder(ReadAtMost(response.Body, maxForgeResponseSize, errResponseTooLong))
if err := decoder.Decode(&runInfo); err != nil {
return nil, errors.Join(AuthError{
http.StatusServiceUnavailable,