Configurable JSON parser limit (#51)

* Configurable JSON parser limit

Signed-off-by: Gabriel Indik <gabriel.indik@kaleido.io>

* Limit in config file

Signed-off-by: Gabriel Indik <gabriel.indik@kaleido.io>

Author: gabriel-indik

src/app.ts

@@ -133,7 +133,7 @@ export const start = async () => {
   });
 
   apiApp.use(express.urlencoded({ extended: true }));
-  apiApp.use(express.json());
+  apiApp.use(express.json({limit: config.jsonParserLimit ?? utils.constants.DEFAULT_JSON_PARSER_LIMIT}));
   apiApp.use('/api/v1', apiRouter);
   apiApp.use(errorHandler);
 

src/lib/interfaces.ts

@@ -29,6 +29,7 @@ export interface IConfig {
     id: string
     endpoint: string
   }[]
+  jsonParserLimit?: string
 }
 
 export interface IFile {

src/lib/utils.ts

@@ -44,7 +44,8 @@ export const constants = {
   MAX_EVENT_QUEUE_SIZE: 1000,
   HASH_HEADER_NAME: 'dx-hash',
   SIZE_HEADER_NAME: 'dx-size',
-  LAST_UPDATE_HEADER_NAME: 'dx-last-update'
+  LAST_UPDATE_HEADER_NAME: 'dx-last-update',
+  DEFAULT_JSON_PARSER_LIMIT: '1mb'
 };
 const log = new Logger('utils.ts');
 axios.defaults.timeout = constants.REST_API_CALL_REQUEST_TIMEOUT;

src/schemas/config.json

@@ -60,6 +60,10 @@
           }
         }
       }
+    },
+    "jsonParserLimit": {
+      "type": "string",
+      "pattern": "^\\d+(k|K|m|M|g|G|t|T|p|P)?(b|B)$"
     }
   }
 }