Documentation
¶
Index ¶
Constants ¶
View Source
const MaxEvaluatedBodyBytes = 1 << 20 // 1 MiB
MaxEvaluatedBodyBytes bounds what a pre-evaluator is shown of the request.
The body has to be held in memory to be both matched and replayed to the backend, so an unbounded read is a memory amplifier an unauthenticated caller controls.
Variables ¶
View Source
var ErrBodyTooLarge = errors.New("cel: request body exceeds the evaluable limit")
ErrBodyTooLarge is returned when the request body exceeds MaxEvaluatedBodyBytes, so a guarded endpoint REFUSES it.
Truncating instead would be the dangerous choice: the filter would match against a prefix and pass whatever sat past the cut, which turns the cap itself into the bypass — pad ahead of the method name and the rule stops seeing it. A body the guard cannot read in full is a body the guard cannot clear.
Functions ¶
func BackendFactory ¶
func BackendFactory(l logging.Logger, bf proxy.BackendFactory) proxy.BackendFactory
Types ¶
Source Files
Directories
Click to show internal directories.
Click to hide internal directories.