Re: [whatwg/streams] ReadableStreamBYOBReader.prototype.readFully(view) (#1143)

Is this going to be accompanied with a timeout parameter or abort signal? Otherwise, I'm concerned about the possibility of a malicious actor spamming an endpoint with large but extremely low data rate requests (think: a single minimum-size TCP packet once per second) and forcing it to run out of memory. Of course, [intermediate proxies can largely mitigate this](https://www.cloudflare.com/learning/ddos/ddos-low-and-slow-attack/), but not every implementation can trust the source of their data, and this would be valuable for knocking out that vulnerability a bit easier.

-- 
You are receiving this because you are subscribed to this thread.
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/streams/issues/1143#issuecomment-977165684