diff options
| author | Jeremy Evans <code@jeremyevans.net> | 2023-04-28 17:05:27 -0700 |
|---|---|---|
| committer | Jeremy Evans <code@jeremyevans.net> | 2023-04-28 20:14:55 -0700 |
| commit | 4f15681097997bd3f8b4f9ce1a7db296724e921a (patch) | |
| tree | 373a1e1595e28d2191afa28923e878a4c1b3415c /lib/rack/conditional_get.rb | |
| parent | a54b61511e1d08919ae2c6392fa3084290f70dd8 (diff) | |
| download | rack-4f15681097997bd3f8b4f9ce1a7db296724e921a.tar.gz | |
Limit max size and number of parameters parsed for Content-Disposition
Not strictly necessary, but this limits the damage in pathological
cases. These limits are probably already too generous, we could
probably get by with 8 params and 1024 bytes. One of tests uses
more than 1024 bytes, though. Still, it seems unlikely any
legitimate requests would exceed these limits. We could make the
limits configurable via an accessor method, if desired.
Diffstat (limited to 'lib/rack/conditional_get.rb')
0 files changed, 0 insertions, 0 deletions