>From what I have read about keywords in Clojure, it does not seem like they
are garbage collected. The keyword params middleware seems to convert user
input into keywords. Putting two and two together, it seems like you could
DoS any server using this middleware by sending large amounts of random
strings as params. Eventually exhausting the memory of the JVM.

This is a common security vulnerability in the Ruby world with converting
user input strings to symbols. Am I missing something here?

Thanks,
Tony

-- 
You received this message because you are subscribed to the Google
Groups "Clojure" group.
To post to this group, send email to clojure@googlegroups.com
Note that posts from new members are moderated - please be patient with your 
first post.
To unsubscribe from this group, send email to
clojure+unsubscr...@googlegroups.com
For more options, visit this group at
http://groups.google.com/group/clojure?hl=en

Reply via email to