Merge pull request #914 from stripe/brandur-update-webhook-example

Update webhook handler example to use `http.MaxBytesReader`
stripe · Aug 12, 2019 · b7fac25 · b7fac25
2 parents 1d97ad6 + 67eacb8
commit b7fac25
Showing 1 changed file with 4 additions and 0 deletions.
diff --git a/webhook/client_handler_test.go b/webhook/client_handler_test.go
@@ -11,6 +11,10 @@ import (
 
 func Example() {
 	http.HandleFunc("/webhook", func(w http.ResponseWriter, req *http.Request) {
+		// Protects against a malicious client streaming us an endless requst
+		// body
+		const MaxBodyBytes = int64(65536)
+		req.Body = http.MaxBytesReader(w, req.Body, MaxBodyBytes)
 
 		body, err := ioutil.ReadAll(req.Body)
 		if err != nil {