-
Bug
-
Resolution: Done
-
Major
-
7.0.9.GA, 7.1.2.GA
Default value of ajp-listener's max-parameters attribute is incorrectly described in Configuration Guide like the following:
Attribute | Default | Description |
---|---|---|
max-parameters | 100 | The maximum number of parameters that will be parsed. This is used to protect against hash vulnerabilities. This applies to both query parameters, and to POST data, but is not cumulative. For example, you can potentially have max parameters * 2 total parameters. |
The value in Default column should be 1000.
- is cloned by
-
JBEAP-15033 [7.1] Configuration Guide: Default value of ajp-listener's max-parameters attribute is incorrectly described.
- Closed