Function TestDecompress_LargePayloadDosPrevention

middleware/decompress_test.go:457–485

(t *testing.T)

}

func TestDecompress_LargePayloadDosPrevention(t *testing.T) {
	e := echo.New()
	// Simulate a DoS attack with highly compressed large payload
	largeSize := 10 * 1024 * 1024 // 10MB decompressed
	largeBody := bytes.Repeat([]byte("Z"), largeSize)
	var buf bytes.Buffer
	gzWriter := gzip.NewWriter(&buf)
	gzWriter.Write(largeBody)
	gzWriter.Close()

	req := httptest.NewRequest(http.MethodPost, "/", &buf)
	req.Header.Set(echo.HeaderContentEncoding, GZIPEncoding)
	rec := httptest.NewRecorder()
	c := e.NewContext(req, rec)

	h, err := DecompressConfig{MaxDecompressedSize: 1 * MB}.ToMiddleware()
	assert.NoError(t, err)

	err = h(func(c *echo.Context) error {
		_, readErr := io.ReadAll(c.Request().Body)
		return readErr
	})(c)

	// Should prevent DoS by returning 413
	assert.Error(t, err)
	he, ok := err.(echo.HTTPStatusCoder)
	assert.True(t, ok)
	assert.Equal(t, http.StatusRequestEntityTooLarge, he.StatusCode())
}

func BenchmarkDecompress_WithLimit(b *testing.B) {
	e := echo.New()