Skip to content

Test large request is never dispatched#95962

Merged
albertzaharovits merged 2 commits intoelastic:mainfrom
albertzaharovits:test-validation-failure-no-request-buffering
May 10, 2023
Merged

Test large request is never dispatched#95962
albertzaharovits merged 2 commits intoelastic:mainfrom
albertzaharovits:test-validation-failure-no-request-buffering

Conversation

@albertzaharovits
Copy link
Copy Markdown
Contributor

@albertzaharovits albertzaharovits commented May 9, 2023

Large requests, that exceed the http.max_content_length,
are never dispatched, even if the HTTP header validation
fails and the request should otherwise be dispatched as
a "bad" one.

The overarching goal is to test cover that content is dropped
when HTTP validation fails (for big and small requests
alike).

Related #95112

@albertzaharovits albertzaharovits added :Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) >test Issues or PRs that are addressing/adding tests labels May 9, 2023
@albertzaharovits albertzaharovits marked this pull request as ready for review May 9, 2023 17:18
@elasticsearchmachine
Copy link
Copy Markdown
Collaborator

Pinging @elastic/es-security (Team:Security)

@elasticsearchmachine elasticsearchmachine added the Team:Security Meta label for security team label May 9, 2023
Copy link
Copy Markdown
Contributor

@jakelandis jakelandis left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@albertzaharovits albertzaharovits merged commit 869d144 into elastic:main May 10, 2023
@albertzaharovits albertzaharovits deleted the test-validation-failure-no-request-buffering branch May 10, 2023 06:31
albertzaharovits added a commit to albertzaharovits/elasticsearch that referenced this pull request Jun 19, 2023
Large requests, that exceed the http.max_content_length,
are never dispatched, even if the HTTP header validation
fails and the request should otherwise be dispatched as
a "bad" one.
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

:Security/Authentication Logging in, Usernames/passwords, Realms (Native/LDAP/AD/SAML/PKI/etc) Team:Security Meta label for security team >test Issues or PRs that are addressing/adding tests v8.9.0

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants