Cap HTTP request header size to prevent DoS
Cap HTTP request header size to prevent DoS: a task in MiMo-V2.6-RL-oss: Agentic RL Environments (MiMo RL release). Looking at StartHTTPServer in server/service.go, the http.Server is configured with the various timeout fields explicitly set, but there's no upper bound on request header size — it…
The task
Looking at StartHTTPServer in server/service.go, the http.Server is configured with the various timeout fields explicitly set, but there's no upper bound on request header size — it just inherits the Go default, which is generous enough to be uncomfortable for a process that's…
Part of XiaomiMiMo/MiMo-V2.6-RL-oss.