Sign Up to our social questions and Answers Engine to ask questions, answer people’s questions, and connect with other people.
Login to our social questions & Answers Engine to ask questions answer people’s questions & connect with other people.
Lost your password? Please enter your email address. You will receive a link and will create a new password via email.
Please briefly explain why you feel this question should be reported.
Please briefly explain why you feel this answer should be reported.
Please briefly explain why you feel this user should be reported.
As per the solutions mentioned in this SO thread , we need to set the maxFormContentSize parameter. But such a solution can lead to DoS through hash table vulnerability .
Is there any way other than limiting the post request, may be by breaking it into multiple requests ? I need to use this on a web client with no javascript support.
https://github.com/eclipse/jetty.project/commit/085c79d7d6cfbccc02821ffdb64968593df3e0bf
Jetty added a mechanism to handle this concern quite some time ago by calling setMaxFormKeys on the ContextHandler. Above is the commit adding that support in and the corresponding test case. Exists in jetty 7.6.x and 8.1.x as well as in jetty 9 milestone releases.