Repository navigation
[MEDIUM] AI service has no request body size limit #137
Description
Engineering Gap
FastAPI application in app/ai-service/main.py has no request body size limit configured. Large payloads (malicious or accidental) could exhaust memory.
Codebase Evidence
app/ai-service/main.pyline 76-83: FastAPI app created withoutmax_request_body_sizeor middleware- No ASGI middleware for body size limiting
Risk Profile
Memory exhaustion from large request bodies. DoS vector.
Remediation Strategy
Add ASGI middleware or Uvicorn configuration to limit request body size (e.g., 10MB). Return 413 for oversized requests.
Success Conditions
- Request body size limit enforced
- 413 response for oversized requests
- Limit documented
Change Surface
Files: main.py, Uvicorn config
Security Review
Mitigates DoS via large payloads.
Completion Checklist
- Implementation completed
- Peer reviewed
- Tests passing
- Ready for merge
Activity
jaynomyaro commentedon Jun 16, 2026
Hi! I’m a full-stack developer with a strong blockchain background. I’d love to handle this issue and can deliver a clean, reliable solution. Kindly assign it to me.
ameeribro4-sudo commentedon Jun 17, 2026
Can I take this?
gbengaeben commentedon Jun 21, 2026
Hi Maintainer,
I’d love to work on this issue. I’ve reviewed the requirements and believe I can implement the solution according to the project’s guidelines and best practices.
If the issue is available, I’d be happy to take ownership and submit a PR for review.
Thank you for your consideration.
grantfox-oss commentedon Jun 21, 2026
🦊 GrantFox — @gbengaeben has been assigned to this issue as part of the Official Campaign campaign!
Next steps:
Closes #137)Good luck! Track your progress on GrantFox.
grantfox-oss commentedon Jun 22, 2026
🎉 This issue has been marked as completed on GrantFox as part of the Official Campaign campaign!
@gbengaeben's PR #192 was approved and merged by @kilodesodiq-arch.
🏆 @gbengaeben: You earned 35 FoxPoints for this contribution! Your current tier: Explorer (293 total points). Track your full progress on GrantFox.
👏 Great work, @gbengaeben! Keep contributing to ChainForgee.
feat(ai-service): enforce HTTP request body size limit (fixes ChainFo…