From 68dc100565569330748174811f25f91b81975a07 Mon Sep 17 00:00:00 2001 From: Sam Roberts Date: Wed, 28 Nov 2018 09:02:17 -0800 Subject: [PATCH] doc: describe current HTTP header size limit Document that the limit was changed from 80KB to 8KB in 186035243. Fixes: https://github.com/nodejs/node/issues/24693 PR-URL: https://github.com/nodejs/node/pull/24700 Reviewed-By: Matteo Collina Reviewed-By: Vse Mozhet Byt --- doc/api/errors.md | 8 +++++++- 1 file changed, 7 insertions(+), 1 deletion(-) diff --git a/doc/api/errors.md b/doc/api/errors.md index 500fb7801b61fd..68bc1e1c5a4158 100644 --- a/doc/api/errors.md +++ b/doc/api/errors.md @@ -1869,9 +1869,15 @@ Creation of a [`zlib`][] object failed due to incorrect configuration. ### HPE_HEADER_OVERFLOW + Too much HTTP header data was received. In order to protect against malicious or -malconfigured clients, if more than 80KB of HTTP header data is received then +malconfigured clients, if more than 8KB of HTTP header data is received then HTTP parsing will abort without a request or response object being created, and an `Error` with this code will be emitted.