Fix gosec scan: G112 (CWE-400) Potential Slowloris Attack (#10872)

This commit is contained in:
terencechain
2022-06-13 15:29:26 -07:00
committed by GitHub
parent 80f4f22401
commit 4c4fb9f2c0
5 changed files with 13 additions and 8 deletions

View File

@@ -52,7 +52,7 @@ func NewService(addr string, svcRegistry *runtime.ServiceRegistry, additionalHan
mux.HandleFunc(h.Path, h.Handler)
}
s.server = &http.Server{Addr: addr, Handler: mux}
s.server = &http.Server{Addr: addr, Handler: mux, ReadHeaderTimeout: time.Second}
return s
}

View File

@@ -2,6 +2,7 @@ package prometheus
import (
"net/http"
"time"
"github.com/prometheus/client_golang/prometheus/promhttp"
)
@@ -12,6 +13,6 @@ func RunSimpleServerOrDie(addr string) {
mux := http.NewServeMux()
mux.Handle("/metrics", promhttp.Handler())
svr := &http.Server{Addr: addr, Handler: mux}
svr := &http.Server{Addr: addr, Handler: mux, ReadHeaderTimeout: time.Second}
log.Fatal(svr.ListenAndServe())
}