Re: [boost] [Beast] Security issue note

Subject: Re: [boost] [Beast] Security issue note
From: Artyom Beilis (artyom.beilis_at_[hidden])
Date: 2017-06-28 08:06:59

>> Note: the default and reasonable max_context_length must be defined by default.
>
> What's typical? How about 8MB for responses and 1MB for requests?
>

In CppCMS I use 1MB for generic content type and 64MB for
multipart/form-data (that goes to filesystem - not memory...)

If you look at PHP defaults they are: http://php.net/manual/en/ini.core.php

8MB for post and for files 2MB per file up to 20 files.

For client... it is little bit trickier since you may not know the
response size. And in any case you probably do not download entire
response to memory.

Artyom