cookie bomb - how to protect?
coderman
coderman at gmail.com
Sun Jan 19 16:38:49 UTC 2014
On Sun, Jan 19, 2014 at 8:35 AM, coderman <coderman at gmail.com> wrote:
> ....
> i'd love to know of more elegant ways to handle this, with header
> specific handling - especially cookies, if possible...
the less better way to change this is:
http://nginx.org/en/docs/http/ngx_http_core_module.html#large_client_header_buffers
a blunt aggregate rather than header or cookie specific constraints.
best regards,
More information about the nginx
mailing list