01e2ee1aa0744530e4cca76f95854b3c5d0ab976
Body-size ceilings (MaxBytesReader, per-route + Content-Length pre-reject), Server.MaxHeaderBytes, and a per-IP token-bucket rate limit shut the critical pre-auth memory-exhaustion vector. Regression test asserts a bounded RSS.
Description
Synced from fn_registry
Languages
Go
94.2%
TypeScript
3.1%
Shell
2.6%