mirror of
https://github.com/nodejs/node.git
synced 2026-11-09 15:11:11 -05:00
deps,http: llhttp set max header size to 8KB
CVE-2018-12121 As per nodejs-private/node-private#149 for http_parse but for llhttp Ref: https://github.com/nodejs-private/node-private/pull/143 PR-URL: https://github.com/nodejs-private/node-private/pull/149 Reviewed-By: Matteo Collina <hello@matteocollina.com>
This commit is contained in:
1 parent
186035243f
commit
f413f7c9cf
1 file changed
+1
-1
@@ -852,7 +852,7 @@ class Parser : public AsyncWrap, public StreamListener {
|
||||
|
||||
static const parser_settings_t settings;
|
||||
#ifdef NODE_EXPERIMENTAL_HTTP
|
||||
static const uint64_t kMaxHeaderSize = 80 * 1024;
|
||||
static const uint64_t kMaxHeaderSize = 8 * 1024;
|
||||
#endif /* NODE_EXPERIMENTAL_HTTP */
|
||||
};
|
||||
|
||||
|
||||
Reference in new issue
Block a user