Issue 5148 in pharo: LimitNumberOfEntriesInZnMultiValueDictionary

Status: FixToInclude
Owner: ----
Labels: Milestone-1.4 Type-Feature Milestone-1.3

New issue 5148 by [hidden email]:  
LimitNumberOfEntriesInZnMultiValueDictionary
http://code.google.com/p/pharo/issues/detail?id=5148

Security related enhancements to the use of [ZnMultiValue]Dictionaries in  
Zinc HTTP Components.

In http://ss3.gemstone.com/ss/PharoInbox

Name: Zinc-HTTP-SvenVanCaekenberghe.234
Author: SvenVanCaekenberghe
Time: 3 January 2012, 3:42:40 pm
UUID: add34728-015e-46b6-9aeb-eda8f63e1f03
Ancestors: Zinc-HTTP-SvenVanCaekenberghe.233

changed the implementation of ZnHeaders to use ZnMultiValueDictionary;
ZnLineReader now uses ZnConstants class>>#maximumLineLength (4096) as  
default for signaling a ZnLineTooLong exception;
added a limit option to ZnMultiValueDictionary that defaults to ZnConstants  
class>>#maximumNumberOfDictionaryEntries (256) for signaling a  
ZnTooManyDictionaryEntries exception;
added new ZnTooManyDictionaryEntries error;
changed parent of ZnTooManyRedirects from Exception to Error and added a  
#isResumable true method;
extended ZnMultiThreadedServer>>#readRequestSafely: to also catch  
ZnTooManyDictionaryEntries

AND

Name: Zinc-Tests-SvenVanCaekenberghe.122
Author: SvenVanCaekenberghe
Time: 3 January 2012, 3:44:21 pm
UUID: 41edccdf-4322-41c3-b06c-2b8dca3d9ce3
Ancestors: Zinc-Tests-SvenVanCaekenberghe.121

added ZnLineReaderTests>>#testLineTooLongDefault and  
ZnMultiValueDictionary>>#testTooManyEntries


_______________________________________________
Pharo-bugtracker mailing list
[hidden email]
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-bugtracker

Updates:
        Status: Closed

Comment #1 on issue 5148 by [hidden email]:  
LimitNumberOfEntriesInZnMultiValueDictionary
http://code.google.com/p/pharo/issues/detail?id=5148

in 14279


_______________________________________________
Pharo-bugtracker mailing list
[hidden email]
http://lists.gforge.inria.fr/cgi-bin/mailman/listinfo/pharo-bugtracker