MOD_NEKO_POST_SIZE

Hello list,

  I've just ran into a problem that mod_neko limits the POST
data size
  it can process. I found a way to customize this (by
recompiling from
  sources), but I am just wondering why does it limit in
fact? Apache
  has a LimitRequestBody directive which can be used to
limit the body
  if there is a need, so why mod_neko bothers to have one
more
  arbitrary constraint?

-- 
Best regards,
 Michael                          mailto:mikecomapping.com


-- 
Neko : One VM to run them all
(http://nekovm.org)

Michael Pliskin a écrit :
> Hello list,
> 
>   I've just ran into a problem that mod_neko limits the
POST data size
>   it can process. I found a way to customize this (by
recompiling from
>   sources), but I am just wondering why does it limit
in fact? Apache
>   has a LimitRequestBody directive which can be used to
limit the body
>   if there is a need, so why mod_neko bothers to have
one more
>   arbitrary constraint?

This is default security to prevent memory flooding attack
against badly
configurated servers.

You can bypass this limit by using
"multipart/form-data" encoding, but
then you'll have to use multipart API for retreiving the
data (see
neko.Web.get/parseMultipart in haXe for example).

Best,
Nicolas

-- 
Neko : One VM to run them all
(http://nekovm.org)