Open rationalpsyche opened 9 months ago
I could check the length of the body and see if it exceeds a certain amount and then just process the headers and leave the body as is. Would that be ok? What would be a reasonable maximum body length?
Sorry for the late reply, yes, that would be great. For the use case I had I would allow a body length of 2 MB which is enough to upload a good quality ID.
When using a tag in a multipart/form-data request with a long body the following error is triggered:
To reproduce:
In logger the tag is visible as not processed
POST /<@random_num(10)/>test.txt HTTP/1.1
Use case: a web app requiring a specific large file (e.g. ID card image) for processing and at the same time having GET parameters where HackVertor would be useful.