This is an automated email from the ASF dual-hosted git repository.

cmcfarlen pushed a commit to branch 10.0.x
in repository https://gitbox.apache.org/repos/asf/trafficserver.git

commit 0f3fea471b64af6caeca456cfbd8cddec3641a65
Author: Masakazu Kitajo <[email protected]>
AuthorDate: Thu Aug 15 17:12:57 2024 -0600

    Reduce the default size for http.header_field_max_size (#11695)
    
    * Reduce the default size for http.header_field_max_size
    
    * Update upgrading documentation
    
    (cherry picked from commit ec4785028ff6434ebd392a04da9c953da092b12c)
---
 doc/admin-guide/files/records.yaml.en.rst | 2 +-
 src/records/RecordsConfig.cc              | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/doc/admin-guide/files/records.yaml.en.rst 
b/doc/admin-guide/files/records.yaml.en.rst
index c1a1e85a01..86177b2f70 100644
--- a/doc/admin-guide/files/records.yaml.en.rst
+++ b/doc/admin-guide/files/records.yaml.en.rst
@@ -1317,7 +1317,7 @@ allow-plain
    request target and HTTP version string except when the request is made 
using absolute
    URI in which case the request line may also include the request scheme and 
domain name.
 
-.. ts:cv:: CONFIG proxy.config.http.header_field_max_size INT 131070
+.. ts:cv:: CONFIG proxy.config.http.header_field_max_size INT 32768
    :reloadable:
 
    Controls the maximum size, in bytes, of an HTTP header field in requests. 
Headers
diff --git a/src/records/RecordsConfig.cc b/src/records/RecordsConfig.cc
index 8fe22b8876..b9dd16681f 100644
--- a/src/records/RecordsConfig.cc
+++ b/src/records/RecordsConfig.cc
@@ -530,7 +530,7 @@ static const RecordElement RecordsConfig[] =
 
   {RECT_CONFIG, "proxy.config.http.request_line_max_size", RECD_INT, "65535", 
RECU_DYNAMIC, RR_NULL, RECC_NULL, nullptr, RECA_NULL}
   ,
-  {RECT_CONFIG, "proxy.config.http.header_field_max_size", RECD_INT, "131070", 
RECU_DYNAMIC, RR_NULL, RECC_NULL, nullptr, RECA_NULL}
+  {RECT_CONFIG, "proxy.config.http.header_field_max_size", RECD_INT, "32768", 
RECU_DYNAMIC, RR_NULL, RECC_NULL, nullptr, RECA_NULL}
   ,
   //        ############
   //        # security #

Reply via email to