fix(security): cleanup abort listener when maxResponseBytes limit is exceeded

waleedlatif1 · waleedlatif1 · commit 31e97dfbaaa9 · 2026-05-12T17:24:50.000-07:00
diff --git a/apps/sim/lib/core/security/input-validation.server.ts b/apps/sim/lib/core/security/input-validation.server.ts
@@ -392,6 +392,7 @@ export async function secureFetchWithPinnedIP(
               maxResponseBytes > 0 &&
               totalBytes > maxResponseBytes
             ) {
+              cleanupAbort()
               controller.error(
                 new Error(`Response exceeded maximum size of ${maxResponseBytes} bytes`)
               )

Original file line number	Diff line number	Diff line change
`@@ -392,6 +392,7 @@ export async function secureFetchWithPinnedIP(`
`392`	`392`	`maxResponseBytes > 0 &&`
`393`	`393`	`totalBytes > maxResponseBytes`
`394`	`394`	`) {`
	`395`	`+ cleanupAbort()`
`395`	`396`	`controller.error(`
`396`	`397`	new Error(`Response exceeded maximum size of ${maxResponseBytes} bytes`)
`397`	`398`	`)`