From 55470681ef2fcdc0ae3768637a665d49f35c1391 Mon Sep 17 00:00:00 2001 From: Samuel K Date: Wed, 26 Aug 2026 07:02:30 +0000 Subject: [PATCH] fix: add ReadHeaderTimeout to http servers (G112) Set a 5s ReadHeaderTimeout on the daemon local server and the login callback server to satisfy gosec G112 (slowloris mitigation). --- pkg/daemon/platform/local_server.go | 2 +- pkg/platform/client/client.go | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/pkg/daemon/platform/local_server.go b/pkg/daemon/platform/local_server.go index aa0cd6812..9fa67df6f 100644 --- a/pkg/daemon/platform/local_server.go +++ b/pkg/daemon/platform/local_server.go @@ -122,7 +122,7 @@ func newLocalServer( handlers.PrintRecoveryStack(true), )(mux) handler = handlers.LoggingHandler(log.Writer(log.LevelDebug), handler) - l.httpServer = &http.Server{Handler: handler} + l.httpServer = &http.Server{Handler: handler, ReadHeaderTimeout: 5 * time.Second} return l } diff --git a/pkg/platform/client/client.go b/pkg/platform/client/client.go index e02516b64..09de339e4 100644 --- a/pkg/platform/client/client.go +++ b/pkg/platform/client/client.go @@ -533,7 +533,7 @@ func GetRestConfig(host, token string, insecure bool) (*rest.Config, error) { } func startServer(redirectURI string, keyChannel chan keyStruct) *http.Server { - srv := &http.Server{Addr: ":25843"} + srv := &http.Server{Addr: ":25843", ReadHeaderTimeout: 5 * time.Second} http.HandleFunc("/login", func(w http.ResponseWriter, r *http.Request) { keys, ok := r.URL.Query()["key"]