[DROIDS-36] Make sure HTTP protocol handler can deal with DoS conditions

• Type: Improvement
• Status: Open
• Priority: Major
• Resolution: Unresolved
• Assignee: Unassigned
• Reporter: Oleg Kalnichevski
• Created: 15/Nov/08 11:26
• Updated: 02/May/13 02:29

Description

HTTP protocol handler must be able to deal with DoS exploits: such as too long HTTP headers, too many HTTP headers in a HTTP message, too long content length in order to avoid out-of-memory condition. The first two safeguards are provided by HttpClient 4.0. They just need to be enabled. The latter safeguard must be implemented in the HttpContentEntity class.

Oleg

Issue Links

• is depended upon by: DROIDS-160 Use new version of HttpComponents