open-horizon / edge-sync-service

Cloud - Edge synchronization service (MMS)
Apache License 2.0
24 stars 26 forks source link

Configure ReadHeaderTimeout in http.Server #142

Closed MaxMcAdam closed 1 year ago

MaxMcAdam commented 1 year ago

From static scan: Potential Slowloris Attack because ReadHeaderTimeout is not configured in the http.Server. The server is started is in edge-sync-service/core/base/http.go on line 24.

johnwalicki commented 1 year ago

https://github.com/open-horizon/edge-sync-service/blob/e76c2d0fc5c73ff0f72418fbd4553655dd6c16d8/core/base/http.go#L24