On 25 Nov 2012, at 1:59 AM, "Will" <william.leon...@lxcenter.org> wrote:

> I was wondering how httpd handles POST requests to cgi.  Does it stream the 
> body directly from the client to the cgi program?  If this is the case, what 
> would be the downsides to streaming that to a file first and going from the 
> file (most likely filesystem cache) to the stdin of the cgi program?

This would allow anybody to DoS your server by filling up the disk on purpose 
and prevent further legitimate requests.

Regards,
Graham
--

Attachment: smime.p7s
Description: S/MIME cryptographic signature

Reply via email to