chenglun.hu d46b489e21 fix(telegram): add timeout to file download to prevent DoS (CWE-400) ...

Add AbortSignal.timeout() to both fetch calls in download.ts to prevent
indefinite hangs when Telegram API is slow or unresponsive.

- getTelegramFile(): 30s timeout for metadata API call
- downloadTelegramFile(): 60s timeout for file download

Both functions now accept optional timeoutMs parameter for configurability.

Fixes #6849

Co-Authored-By: Claude Opus 4.5 <noreply@anthropic.com>

2026-02-02 13:39:39 +05:30

1.7 KiB

Raw Blame History

View Raw