ethstats: set readlimit on ethstats server connection #26207 (#1450)

This prevents DoS when connected to a malicious ethstats server.

Co-authored-by: Martin Holst Swende <martin@swende.se>

ethstats/ethstats.go

@@ -57,6 +57,8 @@ const (
 	txChanSize = 4096
 	// chainHeadChanSize is the size of channel listening to ChainHeadEvent.
 	chainHeadChanSize = 10
+
+	messageSizeLimit = 15 * 1024 * 1024
 )
 
 type consensusEngine interface {
@@ -129,6 +131,7 @@ type connWrapper struct {
 }
 
 func newConnectionWrapper(conn *websocket.Conn) *connWrapper {
+	conn.SetReadLimit(messageSizeLimit)
 	return &connWrapper{conn: conn}
 }