Hi!

Increasing max-request-size to 2048 seems to be danger only in case of
malicious actions.

The more max-request-size, the more memory can be used by one instance
of application. So it may be danger in case of application-level DoS,
exhaustive server memory.

See also max-memory-request-size setting. If max-request-size >
max-memory-request-size, then large requests can make Wt to write it
to temp file. It could be a bottleneck (too many files in /tmp
directory, or not enough space in /tmp directory).

On Thu, Nov 29, 2012 at 7:33 PM, John Robson <john.rob...@usp.br> wrote:
> -----BEGIN PGP SIGNED MESSAGE-----
> Hash: SHA1
>
> Works perfectly.
>
> I changed to: <max-request-size>2048</max-request-size>
>
> I wonder what is the "danger" of this change.
>
> Thank you.
> John
>
> On 11/29/2012 04:13 AM, Nagaev Boris wrote:
>> Hello!
>>
>> Try to increase max-request-size configuration option.
>> http://www.webtoolkit.eu/wt/doc/reference/html/overview.html#config_general
>> If you use apache fcgi, then change FcgidMaxRequestLen as well.
>> http://httpd.apache.org/mod_fcgid/mod/mod_fcgid.html#fcgidmaxrequestlen
>>
>> WTextArea sends its contents to Wt server. If first text is larger
>> than max-request-size, than it fails to send it to server.
>>
>> PS. I created a feature request to Wt developers to skip sending
>> contents of unchanged form widgets.
>> http://redmine.emweb.be/issues/1585
> -----BEGIN PGP SIGNATURE-----
> Version: GnuPG v2.0.19 (GNU/Linux)
> Comment: Using GnuPG with Mozilla - http://enigmail.mozdev.org/
>
> iQEcBAEBAgAGBQJQt4AxAAoJEOjf7XlrDgBAtVcH/2CPOBntoM+yLC00gC+sPxe5
> iPxeHfF2NlmL5Z4jDZpPUnrWBTlTqejnnBcv+VDQ3DHvDPvHIDTrceHGckvSPK8P
> cLR9gu9uwnhOgbc0uzsCw0bE7aMGRa898rcHin12l3UzW8vjocOCqmmJShQDhRMk
> JTWTsR1qdDBUDN0fIRe41tCnAw2VPcJ2suOcxDgqMD2WRmL65/7HfG8cbe8TeWTy
> itJDwCebiDLE8hVK+tgR7QM6/HZYomYqOAwn36Y5znIgDN70KvMK94n86eBlnZK0
> ShucDelfTf8RLuaXp5Eu80aH++7BlFEukpzVjE+o++LkRJVCIQ2jaK0gomOOAFk=
> =vgJn
> -----END PGP SIGNATURE-----
>
>
> ------------------------------------------------------------------------------
> Keep yourself connected to Go Parallel:
> VERIFY Test and improve your parallel project with help from experts
> and peers. http://goparallel.sourceforge.net
> _______________________________________________
> witty-interest mailing list
> witty-interest@lists.sourceforge.net
> https://lists.sourceforge.net/lists/listinfo/witty-interest

------------------------------------------------------------------------------
Keep yourself connected to Go Parallel: 
VERIFY Test and improve your parallel project with help from experts 
and peers. http://goparallel.sourceforge.net
_______________________________________________
witty-interest mailing list
witty-interest@lists.sourceforge.net
https://lists.sourceforge.net/lists/listinfo/witty-interest

Reply via email to