Commit 4dde99e1 authored by Andy Soiron's avatar Andy Soiron

Default enable header_read_timeout_buffered_io

This enables a HeaderReadTimeout protection for
custom HTTP requests

Changelog: security
parent d85eee06
......@@ -5,4 +5,4 @@ rollout_issue_url: https://gitlab.com/gitlab-org/gitlab/-/issues/350233
milestone: '14.8'
type: development
group: group::integrations
default_enabled: false
default_enabled: true
......@@ -29,7 +29,7 @@ module Gitlab
http = super
http.hostname_override = hostname if hostname
if Feature.enabled?(:header_read_timeout_buffered_io)
if Feature.enabled?(:header_read_timeout_buffered_io, default_enabled: :yaml)
gitlab_http = Gitlab::NetHttpAdapter.new(http.address, http.port)
http.instance_variables.each do |variable|
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment