Jeremy Daer a001ddd8aa Bound the web-push delivery queue (max_queue, not the ignored queue_size) ...

Concurrent::ThreadPoolExecutor takes :max_queue; :queue_size was silently
ignored, leaving the delivery backlog unbounded (max_queue: 0). A flood of
valid push subscriptions could accumulate queued deliveries without limit --
more acute now that each delivery task also resolves DNS. Using max_queue: 10000
activates the intended cap; overflow raises RejectedExecutionError under the
default :abort policy, which deliver_later already rescues (push is best-effort,
retried on the next message).

2026-08-26 00:19:29 -07:00

..

notification.rb

Address push-SSRF review: defer DNS off enqueue path, disable proxy on pinned path, revalidate on re-registration

2026-08-26 00:03:15 -07:00

pool.rb

Bound the web-push delivery queue (max_queue, not the ignored queue_size)

2026-08-26 00:19:29 -07:00