Fixing `@helia/http` to prevent endless downloads
Open
need/analysis
- Dominant language
- TypeScript
- Stars
- 1.3k
- Forks
- 159
- Avg merge
- 2h 11m
- Merged PRs (30d)
- 16
Description
We should guard clients against attacks and set a default max block/chunk size at the retrieval layer.
> Fixing `@helia/http` to prevent endless downloads sounds better approach - once the block is in the blockstore it's too late.
>
> It should check the content-length header before continuing the download of a block (if present) but it should also count the downloaded bytes in case the header is a lie.
>
> _Originally posted by @achingbrain in https://github.com/ipfs/helia-verified-fetch/issues/188#issuecomment-2700241682_
Contributor guide
No contributing guide indexed for this repository
Assessment
This issue has not been assessed yet.