libre-service.eu/pad.libre-service.eu-etherpad
libre-service.eu/pad.libre-service.eu-etherpad
1
0
Fork 0
mirror of https://github.com/ether/etherpad-lite.git synced 2025-01-31 19:02:59 +01:00
Code Issues Projects Releases Wiki Activity

security: limit socketio to 1M chars

Browse source
This commit is contained in:
John McLear 2021-02-11 17:48:12 +00:00 committed by Richard Hansen
parent 085ab452a0
commit ab127289c4
1 changed files with 1 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

1
src/node/hooks/express/socketio.js
View file

@ -56,6 +56,7 @@ exports.expressCreateServer = (hookName, args, cb) => {
* https://github.com/socketio/socket.io/issues/2276#issuecomment-147184662 (not totally true, actually, see above)
*/
cookie: false,
maxHttpBufferSize: 10E3,
});
io.use((socket, next) => {