Skip to content

No pagination on list endpoints (DoS) #972

Description

@pmachapman

GetAllPretranslations and other GetAll* handlers under src/Serval/src/Serval.Translation/Features/Engines/ and src/Serval/src/Serval.WordAlignment/ materialize the entire result set into memory and JSON (potentially millions of pretranslation rows). A single request can drive memory pressure / OOM and long GC pauses.

Fix: Add server-enforced pagination (page-size cap, e.g. 1000) and stream results (IAsyncEnumerable) rather than buffering whole lists.

Metadata

Metadata

Assignees

No one assigned

    Labels

    No labels
    No labels

    Type

    Fields

    No fields configured for Bug.

    Projects

    Status
    📋 Backlog

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions