File tree Expand file tree Collapse file tree
csharp/ql/src/Security Features/CWE-016 Expand file tree Collapse file tree Original file line number Diff line number Diff line change 88 The
99 <code >maxRequestLength</code >
1010 attribute sets the limit for the input stream buffering
11- threshold in KB. Attackers can use large requests to cause denial-of-service
11+ threshold in
12+ KB. Attackers can use large requests to cause denial-of-service
1213 attacks.
1314 </p >
1415 </overview >
1516 <recommendation >
1617
1718 <p >
18- The recommended value is 4096 KB but you should try setting it as small
19+ The recommended value is 4096 KB but you should try setting it as
20+ small
1921 as possible according
2022 to business requirements.
2123 </p >
3537 <sample src =" Web.config.ASPNetMaxRequestLength.bad" />
3638
3739 <p >
38- Unless such a high value is strictly needed, it is better to set the
40+ Unless such a high value is strictly needed, it is better to set
41+ the
3942 recommended value (4096 KB):
4043 </p >
4144
You can’t perform that action at this time.
0 commit comments