Uploaded image for project: 'WildFly'
  1. WildFly
  2. WFLY-7718

It is possible to set max-concurrent-requests attribute of request limit filter in undertow to value lower than one

    XMLWordPrintable

Details

    • Bug
    • Resolution: Done
    • Major
    • 11.0.0.Alpha1
    • None
    • Web (Undertow)
    • None
      1. Start EAP
      2. /subsystem=undertow/configuration=filter/request-limit=foo:add(max-concurrent-requests=-42)
    • User Experience

    Description

      According to https://github.com/undertow-io/undertow/blob/master/core/src/main/java/io/undertow/server/handlers/RequestLimitingHandler.java#L64 it should not be possible to perform this operation: /subsystem=undertow/configuration=filter/request-limit=foo:add(max-concurrent-requests=-42) so it looks like no value check is performed in this case.

      Attachments

        Issue Links

          clones

          Bug - A problem that impairs or prevents the functions of the product. JBEAP-7593 It is possible to set max-concurrent-requests attribute of request limit filter in undertow to value lower than one

          • Major - To be worked after higher priority work items are addressed. When the severity is high and the effort to change it is low to moderate, this term is chosen. Issues in this category likely have an existing workaround but implementation or execution may be non-trivial.
          • Verified

          Activity

            People

              sdouglas1@redhat.com Stuart Douglas
              sdouglas1@redhat.com Stuart Douglas
              Jan Kašík Jan Kašík
              Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

                Created:
                Updated:
                Resolved: