https://bz.apache.org/bugzilla/show_bug.cgi?id=69710
--- Comment #31 from Chen Jp <ch...@msn.com> --- Originally there were several configurable limitation: 1. maxPostSize on Connector (default to 2MB) 2. maxParameterCount on Connector (default to 1000) 3. maxHeaderCount on Connector (default to 100) 4. maxHttpRequestHeaderSize on Connector (default to 8K) 5. maxRequestSize on MCE (runtime: default to maxPostSize) 6. maxFileSize on MCE (runtime: default to maxPostSize) 7. Each part header size are limited (2K or 8K?) 8. maxPartHeaderSize on Connector (default to 512) 9. maxPartCount on Connector (default to 50) Per rfc7578 section 4.8, once PR https://github.com/apache/tomcat/pull/869 / https://github.com/apache/commons-fileupload/pull/421 were accepted, maximum number of part headers for each part is 3. Similar to maxHeaderCount and maxHttpRequestHeaderSize, maybe is clearly that if we introduce maxPartHeaderCount to limit total part-headers of all parts and change maxPartHeaderSize to total size of all parts' headers. maxPartHeaderCount + maxPartHeaderSize to rule all headers of all parts. -- You are receiving this mail because: You are the assignee for the bug. --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org For additional commands, e-mail: dev-h...@tomcat.apache.org
