[
https://issues.apache.org/jira/browse/HTTPCORE-81?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Steffen Pingel updated HTTPCORE-81:
-----------------------------------
Attachment: httpcore-limit-message-length.patch
Revised patch to also check length of folded headers. It seems to be possible
to work around the limits set for the blocking implementation using folded
headers as well. I have added a test case
TestHeaderUtils.testMaxHeaderCountForFoldedHeader() to demonstrate that.
Oleg, it might be a good idea to introduce an additional property
HttpConnectionParams.MAX_HEADER_LENGTH to limit the header length which could
be different from the maximum line length.
> Enforce maximum line length and header count
> --------------------------------------------
>
> Key: HTTPCORE-81
> URL: https://issues.apache.org/jira/browse/HTTPCORE-81
> Project: HttpComponents Core
> Issue Type: Improvement
> Components: HttpCore NIO
> Reporter: Steffen Pingel
> Attachments: httpcore-limit-message-length.patch,
> httpcore-limit-message-length.patch, mylar-context.zip
>
>
> The NIO module does not enforce the 'http.connection.max-line-length' and
> 'http.connection.max-header-count' parameters.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
---------------------------------------------------------------------
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
