security fix: Uncontrolled resource consumption (Slowloris)

admin/app.go

@@ -60,6 +60,10 @@ func (app *App) Start() {
 	app.srv = &http.Server{
 		Addr:              app.bind,
 		Handler:           app.router,
+		ReadHeaderTimeout: 15 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      10 * time.Second,
+		IdleTimeout:       30 * time.Second,
 	}
 
 	log.Printf("Ready, listening on %s\n", app.bind)

dashboard/app.go

@@ -54,6 +54,10 @@ func (app *App) Start() {
 	app.srv = &http.Server{
 		Addr:              app.bind,
 		Handler:           app.router,
+		ReadHeaderTimeout: 15 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      10 * time.Second,
+		IdleTimeout:       30 * time.Second,
 	}
 
 	log.Printf("Ready, listening on %s\n", app.bind)

generator/main.go

@@ -105,6 +105,10 @@ func main() {
 
 	srv := &http.Server{
 		Addr:              *bind,
+		ReadHeaderTimeout: 15 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      10 * time.Second,
+		IdleTimeout:       30 * time.Second,
 	}
 
 	http.HandleFunc("/enqueue", enqueueHandler)

qa/app.go

@@ -52,6 +52,10 @@ func (app *App) Start(bind string) {
 	app.srv = &http.Server{
 		Addr:              bind,
 		Handler:           app.router,
+		ReadHeaderTimeout: 15 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      10 * time.Second,
+		IdleTimeout:       30 * time.Second,
 	}
 
 	if err := app.srv.ListenAndServe(); err != nil && err != http.ErrServerClosed {

receiver/main.go

@@ -89,6 +89,10 @@ func main() {
 
 	srv := &http.Server{
 		Addr:              *bind,
+		ReadHeaderTimeout: 15 * time.Second,
+		ReadTimeout:       15 * time.Second,
+		WriteTimeout:      10 * time.Second,
+		IdleTimeout:       30 * time.Second,
 	}
 
 	// Serve pages