fix(remote): cap error body reads to 1KB to prevent memory exhaustion

1 file · +2 -2

M internal/adapters/in/cli/remote/auth.go +2 -2


@@ -55,7 +55,7 @@ func (c Client) Authenticate(ctx context.Context, username, password string) (
55	55		defer resp.Body.Close()
56	56
57	57		if resp.StatusCode >= 400 {
58		-	body, _ := io.ReadAll(resp.Body)
	58	+	body, _ := io.ReadAll(io.LimitReader(resp.Body, 1024))
59	59		var errResp struct {
60	60		Error string `json:"error"`
61	61		}

@@ -95,7 +95,7 @@ func (c *Client) ExchangeRegistryToken(ctx context.Context, subject string) (str
95	95		defer resp.Body.Close()
96	96
97	97		if resp.StatusCode >= 400 {
98		-	body, _ := io.ReadAll(resp.Body)
	98	+	body, _ := io.ReadAll(io.LimitReader(resp.Body, 1024))
99	99		var errResp struct {
100	100		Error string `json:"error"`
101	101		}


@@ -55,7 +55,7 @@ func (c Client) Authenticate(ctx context.Context, username, password string) (
55		defer resp.Body.Close()	55		defer resp.Body.Close()
56			56
57		if resp.StatusCode >= 400 {	57		if resp.StatusCode >= 400 {
58	-	body, _ := io.ReadAll(resp.Body)	58	+	body, _ := io.ReadAll(io.LimitReader(resp.Body, 1024))
59		var errResp struct {	59		var errResp struct {
60		Error string `json:"error"`	60		Error string `json:"error"`
61		}	61		}

@@ -95,7 +95,7 @@ func (c *Client) ExchangeRegistryToken(ctx context.Context, subject string) (str
95		defer resp.Body.Close()	95		defer resp.Body.Close()
96			96
97		if resp.StatusCode >= 400 {	97		if resp.StatusCode >= 400 {
98	-	body, _ := io.ReadAll(resp.Body)	98	+	body, _ := io.ReadAll(io.LimitReader(resp.Body, 1024))
99		var errResp struct {	99		var errResp struct {
100		Error string `json:"error"`	100		Error string `json:"error"`
101		}	101		}