rsocket / rsocket-java

Java implementation of RSocket
http://rsocket.io
Apache License 2.0
2.36k stars 354 forks source link

Validate number of messages received #1064

Closed rstoyanchev closed 2 years ago

rstoyanchev commented 2 years ago

The publishers created by RSocketRequester for inbound streams do not validate the number of messages received, which is fine for behaved clients since back pressure is built into the protocol, but generally publishers should perform basic checks to protect downstream subscribers and create a boundary of trust.

OlegDokuka commented 2 years ago

closed by #1067