Dwi Siswanto d7da0e0914 fix(http): resolve timeout config issues (#6562) ...

across multiple layers

Fixes timeout configuration conflicts where HTTP
requests would timeout prematurely despite
configured values in `@timeout` annotations or
`-timeout` flags.

RCA:
* `retryablehttp` pkg overriding with default
  30s timeout.
* Custom timeouts not propagating to
  `retryablehttp` layer.
* Multiple timeout layers not sync properly.

Changes:
* Propagate custom timeouts from `@timeout`
  annotations to `retryablehttp` layer.
* Adjust 5-minute maximum cap to prevent DoS via
  extremely large timeouts.
* Ensure `retryableHttpOptions.Timeout` respects
  `ResponseHeaderTimeout`.
* Add comprehensive tests for timeout capping
  behavior.

This allows templates to override global timeout
via `@timeout` annotations while preventing abuse
thru unreasonably large timeout values.

Fixes #6560.

Signed-off-by: Dwi Siswanto <git@dw1.io>

2025-11-04 08:51:17 +07:00

..

nucleierr

chore(typos): fix typos

2025-10-10 17:32:54 +02:00

scanstrategy

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

interfaces.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

resume.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

types.go

fix(http): resolve timeout config issues (#6562)

2025-11-04 08:51:17 +07:00