shinchan-zhai 456570c37c security: add safe.ReadAllLimited — bound all HTTP response body reads to 10MB ...

- Created safe/io.go with ReadAllLimited helper (default 10MB limit)
- Replaced 62 unbounded io.ReadAll(resp.Body) calls across 32 files
- Covers all exchange traders (Hyperliquid, Bybit, Binance, OKX, Aster,
  KuCoin, Gate, Bitget, Lighter, Indodax), providers (CoinAnk, Alpaca,
  TwelveData), MCP client/x402, market data, wallet, telegram, kernel
- Prevents OOM from malicious/buggy exchange API responses
- Previously fixed: brain.go, sentinel.go already had manual LimitReader

2026-03-25 01:05:54 +08:00

..

engine_analysis.go

refactor: split large files and clean up project structure

2026-03-12 12:53:57 +08:00

engine_position.go

refactor: split large files and clean up project structure

2026-03-12 12:53:57 +08:00

engine_prompt.go

refactor: optimize codebase encoding

2026-03-12 16:14:56 +08:00

engine.go

security: add safe.ReadAllLimited — bound all HTTP response body reads to 10MB

2026-03-25 01:05:54 +08:00

formatter.go

refactor: optimize codebase encoding

2026-03-12 16:14:56 +08:00

grid_engine.go

feat(grid): auto-adjust grid direction based on box breakouts

2026-02-04 11:25:47 +08:00

prompt_builder_test.go

refactor: optimize codebase encoding

2026-03-12 16:14:56 +08:00

prompt_builder.go

refactor: optimize codebase encoding

2026-03-12 16:14:56 +08:00

schema.go

refactor: optimize codebase encoding

2026-03-12 16:14:56 +08:00

validate_test.go

refactor: rename decision package to kernel

2026-01-03 14:25:40 +08:00