LearnBoost / socket.io-spec

Specification for the Socket.IO Protocol (0.9)
http://socket.io
224 stars 22 forks source link

limiting message sizes #4

Open dvv opened 13 years ago

dvv commented 13 years ago

Hi!

Since V8 JSON.parse is buffering, a malicious client can take over server's memory by sending lengthy messages. Hence, would be good to have a configurable limit for message size at transport level.

--Vladimir