Comment 2 for bug 1100282
Revision history for this message
| Dolph Mathews (dolph) wrote Re: DoS through XML entity expansion | #2 |
© 2004
Canonical Ltd.
•
Terms of use
•
Data privacy
•
Contact Launchpad Support
•
Blog
•
Careers
•
System status
•
f33e652
(Get the code!)
I wrote a 4KB request similar to the above that took about 10 minutes to consume > 1 GB server memory.
Thierry's suggestion fixes the DoS vulnerability, but then the same request will still return a 500 as the subsequent code doesn't know how to deal with XML Entities.
The attached patch completely ignores XML entities, comments, and processing instructions -- the sample request above now results in a quick 401 Unauthorized, as expected.