Skip to content

Commit 71fd537

Browse files
committed
C#: Remove tabs from qhelp file
1 parent 63884c1 commit 71fd537

File tree

1 file changed

+41
-52
lines changed

1 file changed

+41
-52
lines changed

csharp/ql/src/Security Features/CWE-016/ASPNetMaxRequestLength.qhelp

Lines changed: 41 additions & 52 deletions
Original file line numberDiff line numberDiff line change
@@ -3,56 +3,45 @@
33
"qhelp.dtd">
44
<qhelp>
55

6-
<overview>
7-
<p>
8-
The
9-
<code>maxRequestLength</code>
10-
attribute sets the limit for the input stream buffering
11-
threshold in
12-
KB. Attackers can use large requests to cause denial-of-service
13-
attacks.
14-
</p>
15-
</overview>
16-
<recommendation>
17-
18-
<p>
19-
The recommended value is 4096 KB but you should try setting it as
20-
small
21-
as possible according
22-
to business requirements.
23-
</p>
24-
25-
</recommendation>
26-
<example>
27-
28-
<p>
29-
The following example shows the
30-
<code>maxRequestLength</code>
31-
attribute set to a high value
32-
(255 MB) in a
33-
<code>Web.config</code>
34-
file for ASP.NET:
35-
</p>
36-
37-
<sample src="Web.config.ASPNetMaxRequestLength.bad" />
38-
39-
<p>
40-
Unless such a high value is strictly needed, it is better to set
41-
the
42-
recommended value (4096 KB):
43-
</p>
44-
45-
<sample src="Web.config.ASPNetMaxRequestLength.good" />
46-
47-
</example>
48-
49-
<references>
50-
51-
<li>
52-
.NET API:
53-
<a
54-
href="https://docs.microsoft.com/en-us/dotnet/api/system.web.configuration.httpruntimesection.maxrequestlength?view=netframework-4.8">MaxRequestLength limit to prevent denial of service attacks</a>
55-
.
56-
</li>
57-
</references>
6+
<overview>
7+
<p>
8+
The <code>maxRequestLength</code> attribute sets the limit for the input
9+
stream buffering threshold in KB. Attackers can use large requests to cause
10+
denial-of-service attacks.
11+
</p>
12+
</overview>
13+
<recommendation>
14+
15+
<p>
16+
The recommended value is 4096 KB but you should try setting it as
17+
small as possible according to business requirements.
18+
</p>
19+
20+
</recommendation>
21+
<example>
22+
23+
<p>
24+
The following example shows the <code>maxRequestLength</code>
25+
attribute set to a high value (255 MB) in a <code>Web.config</code>
26+
file for ASP.NET:
27+
</p>
28+
29+
<sample src="Web.config.ASPNetMaxRequestLength.bad" />
30+
31+
<p>
32+
Unless such a high value is strictly needed, it is better to set
33+
the recommended value (4096 KB):
34+
</p>
35+
36+
<sample src="Web.config.ASPNetMaxRequestLength.good" />
37+
38+
</example>
39+
40+
<references>
41+
42+
<li>
43+
MSDN:
44+
<a href="https://docs.microsoft.com/en-us/dotnet/api/system.web.configuration.httpruntimesection.maxrequestlength?view=netframework-4.8">HttpRuntimeSection.MaxRequestLength Property</a>.
45+
</li>
46+
</references>
5847
</qhelp>

0 commit comments

Comments
 (0)