Wednesday, 7 August 2013

Limiting the size of client requests in Apache Tomcat

Limiting the size of client requests in Apache Tomcat

I was wondering what is the best way to limit the size of requests made by
a single client. For example
String password = request.getParameter("password");
Let's say the client was sending a password of length 10,000. I could
perform a check on the length of the string and ignore it if larger than a
certain size but then 10,000 useless bytes have still made their way into
my application. Is their a way of limiting the size of requests at a much
lower level in the network stack?

No comments:

Post a Comment