Merge branch 'main' into renovate/tj-actions-changed-files-digest

kyma-project · Feb 20, 2025 · adeb58c · adeb58c
2 parents dc8f54c + 38140ea
commit adeb58c
Showing 1 changed file with 4 additions and 1 deletion.
diff --git a/internal/selfmonitor/webhook/handler.go b/internal/selfmonitor/webhook/handler.go
@@ -87,13 +87,16 @@ func (h *Handler) ServeHTTP(w http.ResponseWriter, r *http.Request) {
 		return
 	}
 
-	alertsYAML, err := io.ReadAll(r.Body)
+	const maxBytesToRead = 1 << 20 // 1 MB
+
+	alertsYAML, err := io.ReadAll(http.MaxBytesReader(w, r.Body, maxBytesToRead)) // Limit max bytes read (avoid "prone to resource exhaustion" security warning)
 	if err != nil {
 		h.logger.Error(err, "Failed to read request body")
 		w.WriteHeader(http.StatusInternalServerError)
 
 		return
 	}
+
 	defer r.Body.Close()
 
 	var alerts []Alert