diff options
| author | Brad Fitzpatrick <bradfitz@golang.org> | 2011-08-23 12:17:21 +0400 |
|---|---|---|
| committer | Brad Fitzpatrick <bradfitz@golang.org> | 2011-08-23 12:17:21 +0400 |
| commit | f0ef4f474620ed95a7572c579689f262e79a724f (patch) | |
| tree | 80d2caa7f7067ff1434a8cee500772181ef5fb99 /src/pkg/runtime/runtime.c | |
| parent | 6731d47f99d993522aa41990b46498d20ba646f1 (diff) | |
| download | go-f0ef4f474620ed95a7572c579689f262e79a724f.tar.xz | |
http: add MaxBytesReader to limit request body size
This adds http.MaxBytesReader, similar to io.LimitReader,
but specific to http, and for preventing a class of DoS
attacks.
This also makes the 10MB ParseForm limit optional (if
not already set by a MaxBytesReader), documents it,
and also adds "PUT" as a valid verb for parsing forms
in the request body.
Improves issue 2093 (DoS protection)
Fixes #2165 (PUT form parsing)
R=golang-dev, adg
CC=golang-dev
https://golang.org/cl/4921049
Diffstat (limited to 'src/pkg/runtime/runtime.c')
0 files changed, 0 insertions, 0 deletions