fukamachi/caveman

Restrict total size of request body sent from the client

Opened this issue · 0 comments

Hi, not sure if this is a caveman2 question/issue/feature request of a Clack issue. Please let me know if I should post this somewhere else.

Question: Is there a way to restrict the total size of the HTTP request body sent from the client? This is for security reasons to avoid Denial of Service Attacks.

Here's some sample justification: https://docs.djangoproject.com/en/4.2/topics/security/#user-uploaded-content-security

Here's the sample implementation by Apache https://httpd.apache.org/docs/2.4/mod/core.html#limitrequestbody

Perhaps this is a Hunchentoot or Woo configuration? Or is it Clack vs Caveman2?

Any guidance would be appreciated!

Thanks,