Merge branch 'main' into dependabot/go_modules/go-mod-07f3a6036d

PaddleHQ · Dec 19, 2024 · 2f07440 · 2f07440
2 parents deedf15 + 1a56803
commit 2f07440
Show file tree

Hide file tree

Showing 7 changed files with 75 additions and 26 deletions.
diff --git a/adjustments.go b/adjustments.go
diff --git a/pkg/paddlenotification/adjustments.go b/pkg/paddlenotification/adjustments.go
diff --git a/pkg/paddlenotification/shared.go b/pkg/paddlenotification/shared.go
diff --git a/pkg/paddlenotification/subscriptions.go b/pkg/paddlenotification/subscriptions.go
diff --git a/shared.go b/shared.go
diff --git a/subscriptions.go b/subscriptions.go
diff --git a/webhook_verifier.go b/webhook_verifier.go
@@ -51,6 +51,10 @@ func (wv *WebhookVerifier) Verify(req *http.Request) (bool, error) {
 	ts := matches[0][1]
 	h1 := matches[0][2]
 
+	const maxBodySize = 2 << 20 // 2 MB
+
+	req.Body = http.MaxBytesReader(nil, req.Body, maxBodySize)
+
 	body, err := io.ReadAll(req.Body)
 	if err != nil {
 		return false, err