URI limit of 1024

[trunet]

Hello guys,

It's my first time here, I have a question regarding a URI limit of 1024 since resin 2.1(I found a changelog when you implement this in 2.1.5) until 3.1.

resin-3.1.9/modules/resin/src/com/caucho/server/dispatch/InvocationDecoder.java line 344:

if (len > 1024)
throw new BadRequestException(L.l("The request contains an illegal URL."));


Is there some reason to this be limited? We're evaluating resin to one of our product but this is being a problem.

Thanks,

Wagner Sartori Junior

[ferg]

That limit exists for security reasons, to avoid DOS attacks. It should be configurable, though.

[trunet]

The configuration that you're talking is url-length-max. But in my tests this is only for the querystring parameters and not to the url path itself.

Setting url-length-max does not resolve my problem, but changing that line to 4096 resolved. I agree that you could extend that parameter(url-length-max) to url path would resolve this issue ever.

Thanks,

Wagner Sartori Junior