OpenStack Identity (keystone)

block really large requests

Bug #1099025 reported by Dan Prince
6
This bug affects 1 person
Affects Status Importance Assigned to Milestone
OpenStack Identity (keystone)
Fix Released
High
Dan Prince
OpenStack Identity (keystone) 2013.1 "grizzly"

Bug Description

There is no reason keystone needs to accept really large HTTP requests. We should block them globally for security.

Dan Prince (dan-prince)
Changed in keystone:
assignee: nobody → Dan Prince (dan-prince)
importance: Undecided → High
status: New → In Progress
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (master)

Fix proposed to branch: master
Review: https://review.openstack.org/19567

Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix merged to keystone (master)

Reviewed: https://review.openstack.org/19567
Committed: http://github.com/openstack/keystone/commit/7691276b869a86c2b75631d5bede9f61e030d9d8
Submitter: Jenkins
Branch: master

commit 7691276b869a86c2b75631d5bede9f61e030d9d8
Author: Dan Prince <email address hidden>
Date: Sat Jan 12 22:22:42 2013 -0500

    Limit the size of HTTP requests.

    Adds a new RequestBodySizeLimiter middleware to guard against
    really large HTTP requests. The default max request size is 112k
    although this limit is configurable via the 'max_request_body_size'
    config parameter.

    Fixes LP Bug #1099025.

    Change-Id: Id51be3d9a0d829d63d55a92dca61a39a17629785

Changed in keystone:
status: In Progress → Fix Committed
Thierry Carrez (ttx)
Changed in keystone:
milestone: none → grizzly-3
status: Fix Committed → Fix Released
Revision history for this message
OpenStack Infra (hudson-openstack) wrote : Fix proposed to keystone (stable/folsom)

Fix proposed to branch: stable/folsom
Review: https://review.openstack.org/22661

Thierry Carrez (ttx)
Changed in keystone:
milestone: grizzly-3 → 2013.1
To post a comment you must log in.
This report contains Public information  
Everyone can see this information.
Subscribing...

Other bug subscribers

Remote bug watches

Bug watches keep track of this bug in other bug trackers.