From 063e8fbe781ceff44dda633e116639ed7bb9eb1d Mon Sep 17 00:00:00 2001 From: Sam Roberts Date: Wed, 28 Nov 2018 09:02:17 -0800 Subject: doc: describe current HTTP header size limit Document that the limit was changed from 80KB to 8KB in 186035243. Fixes: https://github.com/nodejs/node/issues/24693 PR-URL: https://github.com/nodejs/node/pull/24700 Reviewed-By: Matteo Collina Reviewed-By: Vse Mozhet Byt --- doc/api/errors.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) (limited to 'doc') diff --git a/doc/api/errors.md b/doc/api/errors.md index 96ff284c0a..75d0f368ca 100644 --- a/doc/api/errors.md +++ b/doc/api/errors.md @@ -1880,9 +1880,15 @@ Creation of a [`zlib`][] object failed due to incorrect configuration. ### HPE_HEADER_OVERFLOW + Too much HTTP header data was received. In order to protect against malicious or -malconfigured clients, if more than 80KB of HTTP header data is received then +malconfigured clients, if more than 8KB of HTTP header data is received then HTTP parsing will abort without a request or response object being created, and an `Error` with this code will be emitted. -- cgit v1.2.3