@@ -518,11 +518,11 @@ wrappedRecvN th istatus slowlorisSize readN bufsize = do
518518 bs <- readN bufsize
519519 unless (S.null bs) $ do
520520 writeIORef istatus True
521− -- TODO: think about the slowloris protection in HTTP2: current code
522− -- might open a slow-loris attack vector. Rather than timing we should
523− -- consider limiting the per-client connections assuming that in HTTP2
524− -- we should allow only few connections per host (real-world
525− -- deployments with large NATs may be trickier).
521+ -- TODO: think about the slowloris protection in HTTP2: current code
522+ -- might open a slow-loris attack vector. Rather than timing we should
523+ -- consider limiting the per-client connections assuming that in HTTP2
524+ -- we should allow only few connections per host (real-world
525+ -- deployments with large NATs may be trickier).
526526 when (S.length bs >= slowlorisSize || bufsize <= slowlorisSize) $ T.tickle th
527527 return bs
528528