WIP: Bound request admission and handler resources #10
Loading…
Reference in a new issue
No description provided.
Delete branch "audit/resource-bounds"
Deleting a branch is permanent. Although the deleted branch may continue to exist for a short time before it actually gets removed, it CANNOT be undone in most cases. Continue?
Remediates resource-exhaustion findings by bounding request/upstream/response bytes, header/body read phases, request handlers, expensive work, crawl graph size, and path-regex complexity. Overload returns 429 while health checks retain a reserved handler slot; oversized request bodies return 413; expected disconnect write failures are suppressed.
Verification:
Kanban: t_3cb02522
2874f13b5c1c324f6a20Closing without merge because the owner cancelled the
code-security-audit-2026-07campaign. This does not revert previously merged work.Pull request closed