Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Is there a websocket max payload config option? #200

Open
bryaan opened this issue Jun 4, 2024 · 2 comments
Open

Is there a websocket max payload config option? #200

bryaan opened this issue Jun 4, 2024 · 2 comments
Labels
blocked This issue can't be worked on untill it's unblocked

Comments

@bryaan
Copy link

bryaan commented Jun 4, 2024

There should be a max payload size option for websockets to limit DOS attacks.

@ndortega
Copy link
Member

ndortega commented Jun 5, 2024

Hi @bryaan,

As far as I know, this feature would have to be included in HTTP.jl in order for oxygen to use this. I'd recommend raising this issue over there.

In the meantime, I'd recommend creating either creating an authentication middleware function to restrict who can connect to your websocket or creating a rate-limiting middleware function. Oxygen automatically inserts the clients ip address into the context dictionary of each HTTP.Request.

@bryaan
Copy link
Author

bryaan commented Jun 6, 2024

Opened here JuliaWeb/HTTP.jl#1181

@ndortega ndortega added the blocked This issue can't be worked on untill it's unblocked label Feb 5, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
blocked This issue can't be worked on untill it's unblocked
Projects
None yet
Development

No branches or pull requests

2 participants