Cap HTTP request header size to prevent DoS
Cap HTTP request header size to prevent DoS: a task in MiMo-V2.6-RL-harbor-code: MiMo-V2.6-RL Code (Harbor) (Harbor dataset). Looking at StartHTTPServer in server/service.go , the http.Server is configured with the various timeout fields explicitly set, but there's no upper bound on request header…
The task
Looking at `StartHTTPServer` in `server/service.go`, the `http.Server` is configured with the various timeout fields explicitly set, but there's no upper bound on request header size — it just inherits the Go default, which is generous enough to be uncomfortable for a process that's sitting on a public-facing port.
Part of FineEnvs/MiMo-V2.6-RL-harbor-code.