Skip to content

Commit a2b8aba

Browse files
committed
deps,http: llhttp set max header size to 8KB
CVE-2018-12121 As per nodejs-private/node-private#149 for http_parse but for llhttp Ref: nodejs-private/node-private#143 PR-URL: nodejs-private/node-private#149 Reviewed-By: Matteo Collina <hello@matteocollina.com>
1 parent 74e01d0 commit a2b8aba

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

src/node_http_parser.cc

+1-1
Original file line numberDiff line numberDiff line change
@@ -852,7 +852,7 @@ class Parser : public AsyncWrap, public StreamListener {
852852

853853
static const parser_settings_t settings;
854854
#ifdef NODE_EXPERIMENTAL_HTTP
855-
static const uint64_t kMaxHeaderSize = 80 * 1024;
855+
static const uint64_t kMaxHeaderSize = 8 * 1024;
856856
#endif /* NODE_EXPERIMENTAL_HTTP */
857857
};
858858

0 commit comments

Comments
 (0)