[jira] [Comment Edited] (CXF-8783) How to set "attachment-max-count" property in Apache CXF?
[
https://issues.apache.org/jira/browse/CXF-8783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17629997#comment-17629997
]
Andriy Redko edited comment on CXF-8783 at 11/7/22 7:58 PM:
[~privetkakdela] sure
- from XML ([https://cxf.apache.org/docs/bus-configuration.html):]
{noformat}
{noformat}
- programmatically
{noformat}
bus.setProperty("attachment-max-count", 10) {noformat}
was (Author: reta):
[~privetkakdela] sure
- from XML (https://cxf.apache.org/docs/bus-configuration.html):
{noformat}
{noformat}
{{{}{}}}{{{}{}}}
- programmatically
{noformat}
bus.setProperty("attachment-max-count", 10) {noformat}
> How to set "attachment-max-count" property in Apache CXF?
> -
>
> Key: CXF-8783
> URL: https://issues.apache.org/jira/browse/CXF-8783
> Project: CXF
> Issue Type: Improvement
>Reporter: Eugene
>Priority: Minor
>
> Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message
> attachments present in a given message. This leaves open the possibility of a
> denial of service type attack, where a malicious user crafts a message
> containing a very large number of message attachments. From the 3.3.4 and
> 3.2.11 releases, a default limit of 50 message attachments is enforced. This
> is configurable via the message property "{*}attachment-max-count{*}".
> So, how I can set this property? Via using XML config or command-line
> argument?
> I checked official docs and I know that I can set this property via XML
> config. But have no idea how to do
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
[jira] [Commented] (CXF-8783) How to set "attachment-max-count" property in Apache CXF?
[
https://issues.apache.org/jira/browse/CXF-8783?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17629997#comment-17629997
]
Andriy Redko commented on CXF-8783:
---
[~privetkakdela] sure
- from XML (https://cxf.apache.org/docs/bus-configuration.html):
{noformat}
{noformat}
{{{}{}}}{{{}{}}}
- programmatically
{noformat}
bus.setProperty("attachment-max-count", 10) {noformat}
> How to set "attachment-max-count" property in Apache CXF?
> -
>
> Key: CXF-8783
> URL: https://issues.apache.org/jira/browse/CXF-8783
> Project: CXF
> Issue Type: Improvement
>Reporter: Eugene
>Priority: Minor
>
> Apache CXF before 3.3.4 and 3.2.11 does not restrict the number of message
> attachments present in a given message. This leaves open the possibility of a
> denial of service type attack, where a malicious user crafts a message
> containing a very large number of message attachments. From the 3.3.4 and
> 3.2.11 releases, a default limit of 50 message attachments is enforced. This
> is configurable via the message property "{*}attachment-max-count{*}".
> So, how I can set this property? Via using XML config or command-line
> argument?
> I checked official docs and I know that I can set this property via XML
> config. But have no idea how to do
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
