start EAP define max-parameters on http-listener to some low number, e.g. 2 => /subsystem=undertow/server=default-server/http-listener=default:write-attribute(name=max-parameters, value=2) Do http request with number of parameters greater by one value than set by previous command => e.g. curl -I 'http://127.0.0.1:8080/index.html?aaa=1&bbb=2&ccc=3' This should fail with 400 Bad Request but it doesn't and ends with 200. If you add one more parameter it will start rejecting the requests with 400