[OpenSIPS-Devel] [OpenSIPS/opensips] b56bba: rest_client: Add the 'max_transfer_size' setting

Liviu Chircu noreply at github.com
Wed Nov 17 13:34:17 EST 2021


  Branch: refs/heads/master
  Home:   https://github.com/OpenSIPS/opensips
  Commit: b56bba344e0c067ee7af53bdd1add9ed05b403f3
      https://github.com/OpenSIPS/opensips/commit/b56bba344e0c067ee7af53bdd1add9ed05b403f3
  Author: Liviu Chircu <liviu at opensips.org>
  Date:   2021-11-17 (Wed, 17 Nov 2021)

  Changed paths:
    M modules/rest_client/doc/rest_client_admin.xml
    M modules/rest_client/rest_cb.c
    M modules/rest_client/rest_cb.h
    M modules/rest_client/rest_client.c
    M modules/rest_client/rest_client.h

  Log Message:
  -----------
  rest_client: Add the 'max_transfer_size' setting

Sets a limit on the maximum size of a single download.  May be important
for security purposes, to prevent certain attack vectors such as
malicious "x5u" certificate URLs in STIR/SHAKEN setups.
    Default: 10240 KB

Issue discovered during OpenSIPIt'02,
	by Alfred Farrugia & Sandro Gauci (Enable Security)





More information about the Devel mailing list