fix(sandbox-proxy): raise proxied body/response cap to 20MB - #5353
Merged
Conversation
pedrofrxncx
enabled auto-merge (squash)
July 28, 2026 17:33
decocms Bot
pushed a commit
that referenced
this pull request
Jul 28, 2026
PR: #5353 fix(sandbox-proxy): raise proxied body/response cap to 20MB Bump type: patch - decocms (apps/api/package.json): 4.139.17 -> 4.139.18 Deploy-Scope: server
This file contains hidden or bidirectional Unicode text that may be interpreted or compiled differently than what appears below. To review, open the file in an editor that reveals hidden Unicode characters.
Learn more about bidirectional Unicode characters
Sign up for free
to join this conversation on GitHub.
Already have an account?
Sign in to comment
1 participant
Add this suggestion to a batch that can be applied as a single commit.This suggestion is invalid because no changes were made to the code.Suggestions cannot be applied while the pull request is closed.Suggestions cannot be applied while viewing a subset of changes.Only one suggestion per line can be applied in a batch.Add this suggestion to a batch that can be applied as a single commit.Applying suggestions on deleted lines is not supported.You must change the existing code in this line in order to create a valid suggestion.Outdated suggestions cannot be applied.This suggestion has been applied or marked resolved.Suggestions cannot be applied from pending reviews.Suggestions cannot be applied on multi-line comments.Suggestions cannot be applied while the pull request is queued to merge.Suggestion cannot be applied right now. Please check back later.
Follow-up to #5330 — bumps
FORWARDED_BODY_MAX_BYTESfrom 10MB to 20MB.That constant bounds both sides of the sandbox-proxy routes: the
forwardedBodyLimiton incoming client bodies and thereadBoundedTextcap on daemon/preview responses. 10MB was tripping on legitimate payloads (largegit diffs, chatty exec stdout, big preview pages); 20MB still bounds memory per in-flight request.No other change — the cap is a single constant, tests are unaffected.
Verified:
bun test apps/api/src/api/routes/sandbox-proxy.test.ts(10 pass),bun run fmt.Summary by cubic
Raised the sandbox-proxy cap from 10MB to 20MB for both incoming request bodies and daemon/preview responses to stop valid large payloads from being rejected while keeping per-request memory bounded.
Written for commit 5a6f219. Summary will update on new commits.