Dwi Siswanto d7da0e0914 fix(http): resolve timeout config issues (#6562) ...

across multiple layers

Fixes timeout configuration conflicts where HTTP
requests would timeout prematurely despite
configured values in `@timeout` annotations or
`-timeout` flags.

RCA:
* `retryablehttp` pkg overriding with default
  30s timeout.
* Custom timeouts not propagating to
  `retryablehttp` layer.
* Multiple timeout layers not sync properly.

Changes:
* Propagate custom timeouts from `@timeout`
  annotations to `retryablehttp` layer.
* Adjust 5-minute maximum cap to prevent DoS via
  extremely large timeouts.
* Ensure `retryableHttpOptions.Timeout` respects
  `ResponseHeaderTimeout`.
* Add comprehensive tests for timeout capping
  behavior.

This allows templates to override global timeout
via `@timeout` annotations while preventing abuse
thru unreasonably large timeout values.

Fixes #6560.

Signed-off-by: Dwi Siswanto <git@dw1.io>

2025-11-04 08:51:17 +07:00

..

httpclientpool

fix(http): resolve timeout config issues (#6562)

2025-11-04 08:51:17 +07:00

httputils

more goroutine leak fixes to nuclei (#5188)

2024-05-20 00:48:40 +05:30

race

Remove singletons from Nuclei engine (continuation of #6210) (#6296)

2025-07-10 01:17:26 +05:30

raw

cache, goroutine and unbounded workers management (#6420)

2025-09-15 23:48:02 +05:30

signer

Path-Based Fuzzing SQL fix (#6400)

2025-08-25 13:36:58 +05:30

signerpool

Remove singletons from Nuclei engine (continuation of #6210) (#6296)

2025-07-10 01:17:26 +05:30

build_request_test.go

build: bump all direct modules (#6290)

2025-07-01 00:40:44 +07:00

build_request.go

fixing failing integration tests

2025-10-21 14:29:15 +04:00

cluster_test.go

Clustering performance improvements (#5319)

2024-06-27 13:14:43 +05:30

cluster.go

Remove singletons from Nuclei engine (continuation of #6210) (#6296)

2025-07-10 01:17:26 +05:30

http_method_types.go

perf(*): replace encoding/json w/ sonic or go-json (fallback) (#6019)

2025-02-11 03:01:37 +05:30

http_test.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

http.go

Remove singletons from Nuclei engine (continuation of #6210) (#6296)

2025-07-10 01:17:26 +05:30

operators_test.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

operators.go

fix: populate req_url_pattern before event creation (#6547)

2025-10-24 03:06:12 +05:30

request_annotations_test.go

fix(http): resolve timeout config issues (#6562)

2025-11-04 08:51:17 +07:00

request_annotations.go

fix(http): resolve timeout config issues (#6562)

2025-11-04 08:51:17 +07:00

request_condition.go

refactor: use slices.Contains to simplify code

2025-05-27 17:16:26 +08:00

request_fuzz.go

feat(fuzz): eval variables (#6358)

2025-08-16 14:41:22 +05:30

request_generator_test.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30

request_generator.go

feat: fixed max-host-error blocking + progress mismatch + misc (#6193)

2025-05-07 17:22:15 +05:30

request_test.go

fix: improve cleanup in parallel execution (#6490)

2025-09-24 01:12:43 +05:30

request.go

fix(http): resolve timeout config issues (#6562)

2025-11-04 08:51:17 +07:00

signature.go

perf(*): replace encoding/json w/ sonic or go-json (fallback) (#6019)

2025-02-11 03:01:37 +05:30

utils.go

Path-Based Fuzzing SQL fix (#6400)

2025-08-25 13:36:58 +05:30

validate.go

nuclei v3 : misc updates (#4247)

2023-10-17 17:44:13 +05:30