fixing sec issues

cmd/server/api/api.go

@@ -74,8 +74,9 @@ func NewServer(documentRoot string, srv *data.Service, creds map[string]string,
 		})
 	})
 	s.Server = &http.Server{
-		Addr:    fmt.Sprintf(":%d", port),
-		Handler: router,
+		Addr:              fmt.Sprintf(":%d", port),
+		Handler:           router,
+		ReadHeaderTimeout: 2,
 	}
 	return s
 }

cmd/server/runner.go

@@ -66,7 +66,9 @@ func run(updateChan <-chan struct{}) {
 		for {
 			<-updateChan
 			if r, ok := repo.(*repository.EagerRepository); ok {
-				r.Reload()
+				if err := r.Reload(); err != nil {
+					fatal("failed to reload data: "+err.Error(), 1)
+				}
 			}
 			h, err := htpasswd.Open(filepath.Join(documentRoot, ".htpasswd"))
 			if err != nil {