Skip to content

fix(codecs)!: restrict decompression to max size - #20

Merged
spaceone merged 3 commits into
masterfrom
content-encoding-decompression-dos
Aug 19, 2026
Merged

fix(codecs)!: restrict decompression to max size#20
spaceone merged 3 commits into
masterfrom
content-encoding-decompression-dos

Conversation

@spaceone

Copy link
Copy Markdown
Owner
  1. disable automatic decompression (API change)
  2. restrict max body size to 100 MB
  3. restrict max decompressed body size to 100 MB
  4. allow fine grained configuration of size parameters

Fixes GHSA-gw7w-r5qg-26cp (Unbounded HTTP Content-Encoding Decompression)

1. disable automatic decompression (API change)
2. restrict max body size to 100 MB
3. restrict max decompressed body size to 100 MB
4. allow fine grained configuration of size parameters

Fixes GHSA-gw7w-r5qg-26cp (Unbounded HTTP Content-Encoding Decompression)
as per RFC 9110 renamed the reason phrase
@codecov

codecov Bot commented Aug 19, 2026

Copy link
Copy Markdown

Codecov Report

❌ Patch coverage is 91.17647% with 6 lines in your changes missing coverage. Please review.
✅ Project coverage is 98.97%. Comparing base (baa3deb) to head (6f2e586).

Files with missing lines Patch % Lines
httoop/codecs/application/zlib.py 86.95% 3 Missing ⚠️
httoop/codecs/application/gzip.py 84.61% 2 Missing ⚠️
httoop/parser.py 93.75% 1 Missing ⚠️
Additional details and impacted files
@@            Coverage Diff             @@
##           master      #20      +/-   ##
==========================================
+ Coverage   98.70%   98.97%   +0.27%     
==========================================
  Files          65       65              
  Lines        3783     3805      +22     
==========================================
+ Hits         3734     3766      +32     
+ Misses         49       39      -10     

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@spaceone
spaceone merged commit b84acd0 into master Aug 19, 2026
10 of 11 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant