Skip to content

Port 6.5.8 changes to master branch - #3706

Merged
bdarnell merged 6 commits into
tornadoweb:masterfrom
bdarnell:master-port-658
Aug 7, 2026
Merged

Port 6.5.8 changes to master branch#3706
bdarnell merged 6 commits into
tornadoweb:masterfrom
bdarnell:master-port-658

Conversation

@bdarnell

@bdarnell bdarnell commented Aug 7, 2026

Copy link
Copy Markdown
Member

No description provided.

This prevents some CPU and memory amplification attacks.
Large POST bodies can be very expensive to parse in the worst case,
so use the (new in Python 3.8) max_num_fields argument to limit the
cost. A new field in ParseBodyConfig allows users to configure this
limit. The default is 1000, which is the same as that used in php and
node.js.
@bdarnell
bdarnell merged commit 5d4aa8c into tornadoweb:master Aug 7, 2026
16 checks passed
@bdarnell
bdarnell deleted the master-port-658 branch August 7, 2026 02:53
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant