You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
href="https://docs.microsoft.com/en-us/dotnet/api/system.web.configuration.httpruntimesection.maxrequestlength?view=netframework-4.8">MaxRequestLength limit to prevent denial of service attacks</a>
55
-
.
56
-
</li>
57
-
</references>
6
+
<overview>
7
+
<p>
8
+
The <code>maxRequestLength</code> attribute sets the limit for the input
9
+
stream buffering threshold in KB. Attackers can use large requests to cause
10
+
denial-of-service attacks.
11
+
</p>
12
+
</overview>
13
+
<recommendation>
14
+
15
+
<p>
16
+
The recommended value is 4096 KB but you should try setting it as
17
+
small as possible according to business requirements.
18
+
</p>
19
+
20
+
</recommendation>
21
+
<example>
22
+
23
+
<p>
24
+
The following example shows the <code>maxRequestLength</code>
25
+
attribute set to a high value (255 MB) in a <code>Web.config</code>
0 commit comments