api-platform / api-platform/core

Input size validation

Abierto
#7,978 5 comentarios 0 reacciones 0 asignados Ver en GitHub
Lenguaje dominante
PHP
Estrellas
2.6k
Forks
980
Merge medio
2 d 5 h
PR fusionados (30 d)
48

Descripción

Hello,

While browsing the OWASP website, I've stumbled upon [the following interesting recommendation](https://www.owasp.org/index.php/REST_Security_Cheat_Sheet#Input_validation) that isn't, in my knowledge, covered by the API Platform:

> Define an appropriate request size limit and reject requests exceeding the limit with HTTP response status 413 Request Entity Too Large

I believe it would be quite achievable to provide a listener checking for the request content size against a configured threshold and return an appropriate response when necessary.

Is this already covered in API platform?
If not, why?

If that's of interest, I'd be happy working on the implementation.

Best Regards.

Guía de contribución

Abrir la guía de contribución

Evaluación

Este issue todavía no se ha evaluado.

Recibe los nuevos issues en tu correo

Un resumen breve de issues de GitHub para principiantes.