[Zope-Checkins] CVS: Zope/skel/etc - zope.conf.in:1.6.2.24

Andreas Jung andreas at andreas-jung.com
Sat Nov 27 03:24:29 EST 2004


Update of /cvs-repository/Zope/skel/etc
In directory cvs.zope.org:/tmp/cvs-serv21239/skel/etc

Modified Files:
      Tag: Zope-2_7-branch
	zope.conf.in 
Log Message:

      - Collector #1003: added new 'http-header-max-length' directive
        to zope.conf to specific the maximum length of a HTTP request
        header before it is considered as a possible DoS attack and
        discarded.


=== Zope/skel/etc/zope.conf.in 1.6.2.23 => 1.6.2.24 ===
--- Zope/skel/etc/zope.conf.in:1.6.2.23	Fri Nov 26 14:38:36 2004
+++ Zope/skel/etc/zope.conf.in	Sat Nov 27 03:24:29 2004
@@ -420,6 +420,20 @@
 #    cgi-maxlen 10000
 
 
+# Directive: http-header-max-length
+#
+# Description:
+#     Maximum number of bytes allowed within a HTTP request header. The request
+#     is discarded and considered as a DoS attack if the header size exceeds
+#     this limit.
+#
+# Default: 8192
+#
+# Example:
+#
+#     http-header-max-length 16384
+
+
 # Directive: automatically-quote-dtml-request-data
 #
 # Description:



More information about the Zope-Checkins mailing list