Add Slowloris protection (#239)

Author: scottnuma

pkg/workflows/apiserver/server.go

@@ -6,6 +6,7 @@ import (
 	"log"
 	"net/http"
 	"strings"
+	"time"
 
 	"github.com/go-chi/chi/v5"
 	"github.com/gorilla/websocket"
@@ -67,8 +68,9 @@ func Start(handler *ServerHandler, port int) *http.Server {
 	})
 
 	server := &http.Server{
-		Addr:    fmt.Sprintf("localhost:%d", port),
-		Handler: mux,
+		Addr:        fmt.Sprintf("localhost:%d", port),
+		Handler:     mux,
+		ReadTimeout: 5 * time.Second, // Prevent Slowloris DoS attacks
 	}
 
 	go func() {

pkg/workflows/taskserver/server.go

@@ -5,6 +5,7 @@ import (
 	"log"
 	"net"
 	"net/http"
+	"time"
 
 	"github.com/go-chi/chi/v5"
 )
@@ -62,7 +63,8 @@ func (h *ServerHandler) Start() *http.Server {
 	muxHandler := HandlerFromMux(strictHandler, r)
 
 	server := &http.Server{
-		Handler: muxHandler,
+		Handler:     muxHandler,
+		ReadTimeout: 5 * time.Second, // Prevent Slowloris DoS attacks
 	}
 
 	go func() {