Use bounded readers where we currently use io.ReadAll #8823

Open

Assignees

Milestone

Sprint 2026-06-30

opened

on Jun 26, 2026

Everywhere we use io.ReadAll is potentially an unbounded read. It would be better to use https://pkg.go.dev/io#LimitedReader to prevent any potential memory blow-ups.

Metadata

Assignees

ezekiel

Labels

No labels

No labels

Type

No type

Fields

No fields configured for issues without a type.

Projects

No projects

Milestone

Sprint 2026-06-30

Relationships

None yet

Development

No branches or pull requests