In REST API JSON API body should be size limited

Bug #1215501 reported by Clint Byrum
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Heat
Fix Released
High
Liang Chen

Bug Description

JSON costs memory and CPU to parse, so we should put a cap on the length of JSON allowed in request bodies.

A workaround for this might be to run under a proxy or even apache mod_wsgi and cap the request body length there.

Changed in heat:
milestone: none → havana-3
Liang Chen (cbjchen)
Changed in heat:
assignee: nobody → Liang Chen (cbjchen)
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to heat (master)

Fix proposed to branch: master
Review: https://review.openstack.org/44585

Changed in heat:
status: Triaged → In Progress
Thierry Carrez (ttx)
Changed in heat:
milestone: havana-3 → havana-rc1
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to heat (master)

Reviewed: https://review.openstack.org/44585
Committed: http://github.com/openstack/heat/commit/d899f8d9b745af7f9e7240389718bd3c8045a7dc
Submitter: Jenkins
Branch: master

commit d899f8d9b745af7f9e7240389718bd3c8045a7dc
Author: Liang Chen <email address hidden>
Date: Sat Aug 31 14:53:43 2013 +0800

    Impose a size limit on JSON request body

    The size limit on JSON request body is to ensure the server not being
    overwhelmed by extremly large JSON request body.

    Fixes bug #1215501

    Change-Id: Ia58f6690e994d34212953c44821f7a4cc4c435fe

Changed in heat:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in heat:
status: Fix Committed → Fix Released
Thierry Carrez (ttx)
Changed in heat:
milestone: havana-rc1 → 2013.2
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.