deps,http: llhttp set max header size to 8KB

CVE-2018-12121

As per nodejs-private/node-private#149 for http_parse but for llhttp

Ref: https://github.com/nodejs-private/node-private/pull/143
PR-URL: https://github.com/nodejs-private/node-private/pull/149
Reviewed-By: Matteo Collina <hello@matteocollina.com>
This commit is contained in:
Rod Vagg committed 2018-11-28 11:36:34 +11:00
1 parent 186035243f
commit f413f7c9cf
1 file changed
+1 -1
+1 -1
View File
@@ -852,7 +852,7 @@ class Parser : public AsyncWrap, public StreamListener {
static const parser_settings_t settings;
#ifdef NODE_EXPERIMENTAL_HTTP
static const uint64_t kMaxHeaderSize = 80 * 1024;
static const uint64_t kMaxHeaderSize = 8 * 1024;
#endif /* NODE_EXPERIMENTAL_HTTP */
};