[
https://issues.apache.org/jira/browse/NIFI-7153?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Andy LoPresto updated NIFI-7153:
--------------------------------
Resolution: Fixed
Status: Resolved (was: Patch Available)
> Limit length of component property values
> -----------------------------------------
>
> Key: NIFI-7153
> URL: https://issues.apache.org/jira/browse/NIFI-7153
> Project: Apache NiFi
> Issue Type: Improvement
> Components: Core Framework, Core UI
> Affects Versions: 1.11.1
> Reporter: Andy LoPresto
> Assignee: Troy Melhase
> Priority: Major
> Labels: security
> Fix For: 1.12.0
>
> Time Spent: 11h 40m
> Remaining Estimate: 0h
>
> Component properties can vary wildly in their use - some are integers or
> booleans, while others are simple names, and some can accept arbitrary schema
> definitions, code and config blocks, etc. There is no universal length limit
> that can be applied, so the general classes of property should have
> reasonable limits to avoid denial of service attacks through malicious
> setting of arbitrary property values.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
