[OpenSIPS-Devel] [OpenSIPS/opensips] b56bba: rest_client: Add the 'max_transfer_size' setting
Liviu Chircu
noreply at github.com
Wed Nov 17 13:34:17 EST 2021
Branch: refs/heads/master
Home: https://github.com/OpenSIPS/opensips
Commit: b56bba344e0c067ee7af53bdd1add9ed05b403f3
https://github.com/OpenSIPS/opensips/commit/b56bba344e0c067ee7af53bdd1add9ed05b403f3
Author: Liviu Chircu <liviu at opensips.org>
Date: 2021-11-17 (Wed, 17 Nov 2021)
Changed paths:
M modules/rest_client/doc/rest_client_admin.xml
M modules/rest_client/rest_cb.c
M modules/rest_client/rest_cb.h
M modules/rest_client/rest_client.c
M modules/rest_client/rest_client.h
Log Message:
-----------
rest_client: Add the 'max_transfer_size' setting
Sets a limit on the maximum size of a single download. May be important
for security purposes, to prevent certain attack vectors such as
malicious "x5u" certificate URLs in STIR/SHAKEN setups.
Default: 10240 KB
Issue discovered during OpenSIPIt'02,
by Alfred Farrugia & Sandro Gauci (Enable Security)
More information about the Devel
mailing list