Cyprian Kowalczyk 04678b7b6e feat(server): add 30s connection timeout to prevent slow-client thread exhaustion (#198) ...

Set Handler.timeout = 30. Python's BaseHTTPRequestHandler.setup()
calls self.request.settimeout(timeout), which raises socket.timeout
on idle or slow connections after the configured duration.

This defends against Slowloris-style attacks where a client holds
connections open indefinitely, exhausting threads in ThreadingHTTPServer.
Also recovers threads from crashed clients with hung TCP connections.

Addresses #194.

2026-04-09 18:05:18 -07:00

3.9 KiB

Raw Blame History

View Raw