Hugh Brown 7ca4145aff security: add 1 MB payload size limit to webhook ingestion ...

The webhook ingest endpoint read the entire request body with no size
limit, enabling memory exhaustion attacks. Add a 1 MB limit checked
via both Content-Length header (early reject) and actual body size.

Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>

2026-03-07 23:35:10 +05:30

..

api

security: add 1 MB payload size limit to webhook ingestion

2026-03-07 23:35:10 +05:30

core

feat(config): make BASE_URL a required field and update related documentation

2026-03-05 01:36:07 +05:30

db

refactor: reorganize imports and improve code formatting for readability

2026-02-15 13:20:46 +05:30

models

security: add HMAC signature verification to webhook ingest

2026-03-07 23:35:10 +05:30

schemas

security: add HMAC signature verification to webhook ingest

2026-03-07 23:35:10 +05:30

services

security: mitigate prompt injection in agent instruction strings

2026-03-07 23:35:10 +05:30

__init__.py

refactor: update module docstrings for clarity and consistency

2026-02-09 15:49:50 +05:30

main.py

fix: make security headers configurable and add tests

2026-02-24 17:36:44 +01:00