Const
Cap applied to a server-supplied Retry-After header so that a misbehaving origin cannot pin the client in a multi-minute sleep. Matches THREAT_MODEL.md TB-6a (resource-exhaustion via cooperative back-off). MUST remain 30_000 — asserted by unit test.
Retry-After
Cap applied to a server-supplied
Retry-Afterheader so that a misbehaving origin cannot pin the client in a multi-minute sleep. Matches THREAT_MODEL.md TB-6a (resource-exhaustion via cooperative back-off). MUST remain 30_000 — asserted by unit test.