[
https://issues.apache.org/jira/browse/YUNIKORN-2182?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Peter Bacsko resolved YUNIKORN-2182.
------------------------------------
Fix Version/s: 1.6.0
Resolution: Fixed
Merged to master.
> Set ReadHeaderTimeout in http server
> ------------------------------------
>
> Key: YUNIKORN-2182
> URL: https://issues.apache.org/jira/browse/YUNIKORN-2182
> Project: Apache YuniKorn
> Issue Type: Improvement
> Components: core - common, webapp
> Reporter: Wilfred Spiegelenburg
> Assignee: Chenchen Lai
> Priority: Major
> Labels: newbie, pull-request-available
> Fix For: 1.6.0
>
>
> Potential Slowloris Attack because ReadHeaderTimeout is not configured in the
> http.Server (gosec)
> We do not set ReadTimeout or ReadHeaderTimeout so we do not have a timeout at
> all at the moment.
> BTW: this is not important for the webtest servers we build as they are just
> for our tests.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@yunikorn.apache.org
For additional commands, e-mail: dev-h...@yunikorn.apache.org
