Should gorilla/schema care about DoS attacks? about schema

[elithrar]

gorilla/schema could do that: but I'd argue that we'd be introducing another toggle that doubles up with net/http's ParseForm. That limits the request size to 10MB by default and MaxBytesReader provides the dial to tweak this. I'm not convinced that schema should take on that responsibility and/or potentially confuse package users (what if schema's limit is greater than the servers?)

There may be value in mentioning it in the docs, but we'd just be reiterating that the 10MB default limit exists.

[stale]

This issue has been automatically marked as stale because it hasn't seen a recent update. It'll be automatically closed in a few days.