Buy commercial curl support from WolfSSL. We help you work
out your issues, debug your libcurl applications, use the API, port to new
platforms, add new features and more. With a team lead by the curl founder
himself.
Re: Issue with MAX_COOKIE_HEADER_LEN
- Contemporary messages sorted: [ by date ] [ by thread ] [ by subject ] [ by author ] [ by messages with attachments ]
From: Daniel Stenberg via curl-library <curl-library_at_lists.haxx.se>
Date: Wed, 17 May 2023 16:44:16 +0200 (CEST)
On Wed, 17 May 2023, Benjamin Herrenschmidt via curl-library wrote:
> And more specifically by the 8KB limit applied to the cookier headers.
Back again, having done some more thinking.
The main problem with upping this limit is that a typical user don't know what
the maximum allowed line length in the other end is. The limit was introduced
because it was noticed that (some) servers will treat a too long line as a
serious error and repond with a 400.
If curl receives a set of cookies that combined needs TOO_LONG bytes to get
sent over the wire, and it gets a 400 back, then curl is pretty much stuck and
can't do anything against that server without some actions or when enough
number of cookies expire...!
So: not an easy limit to toy around with.
Date: Wed, 17 May 2023 16:44:16 +0200 (CEST)
On Wed, 17 May 2023, Benjamin Herrenschmidt via curl-library wrote:
> And more specifically by the 8KB limit applied to the cookier headers.
Back again, having done some more thinking.
The main problem with upping this limit is that a typical user don't know what
the maximum allowed line length in the other end is. The limit was introduced
because it was noticed that (some) servers will treat a too long line as a
serious error and repond with a 400.
If curl receives a set of cookies that combined needs TOO_LONG bytes to get
sent over the wire, and it gets a 400 back, then curl is pretty much stuck and
can't do anything against that server without some actions or when enough
number of cookies expire...!
So: not an easy limit to toy around with.
-- / daniel.haxx.se | Commercial curl support up to 24x7 is available! | Private help, bug fixes, support, ports, new features | https://curl.se/support.html -- Unsubscribe: https://lists.haxx.se/mailman/listinfo/curl-library Etiquette: https://curl.se/mail/etiquette.htmlReceived on 2023-05-17