H1K0 591b3d2fe3 fix(backend): set HTTP server timeouts to mitigate Slowloris
gin's Run uses a default http.Server with no timeouts, so a client could
hold connections open by trickling request headers. Serve via an explicit
http.Server with a 10s ReadHeaderTimeout and 120s IdleTimeout. Body
read/write remain unbounded so large uploads and downloads still stream.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
2026-06-10 14:13:22 +03:00
S
Description
🎋 Tanabata — web file manager with tags!
AGPL-3.0 6.2 MiB
3.0.0 Latest
2026-07-07 11:17:52 +03:00
Languages
Go 48.9%
Svelte 39.9%
TypeScript 8.7%
PLpgSQL 1.3%
Dockerfile 0.5%
Other 0.7%