Eugene created CXF-8783:
---------------------------
Summary: How to set "attachment-max-count" property in Apache CXF?
Key: CXF-8783
URL: https://issues.apache.org/jira/browse/CXF-8783
Project: CXF
Issue Type: Task
Reporter: Eugene
Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message
attachments present in a given message. This leaves open the possibility of a
denial of service type attack, where a malicious user crafts a message
containing a very large number of message attachments. From the 3.3.4 and
3.2.11 releases, a default limit of 50 message attachments is enforced. This is
configurable via the message property "{*}attachment-max-count{*}".
So, how I can set this property? Via using XML config or command-line argument?
I checked official docs and I know that I can set this property via XML config.
But have no idea how to do
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
