[web-devel] limiting POST

Kazu Yamamoto ( 山本和彦 ) kazu at iij.ad.jp
Fri Jan 6 03:07:58 CET 2012


Hello guys,

As you may know, "Denial of Service through hash table
multi-collisions" was disclosed:

	http://permalink.gmane.org/gmane.comp.security.full-disclosure/83694

The hashable package is affected but not affected to Yesod suite.
However, I guess we should provide size limitation of HTTP body on
POST to Warp.

# Of course, we should provide rate limiting, too.

--Kazu



More information about the web-devel mailing list