Skip to content

Commit 734f9d1

Browse files
feat: decrease the default value of maxHttpBufferSize
This change reduces the default value from 100 mb to a more sane 1 mb. This helps protect the server against denial of service attacks by malicious clients sending huge amounts of data.
1 parent 61b9492 commit 734f9d1

File tree

1 file changed

+1
-1
lines changed

1 file changed

+1
-1
lines changed

lib/server.js

+1-1
Original file line numberDiff line numberDiff line change
@@ -26,7 +26,7 @@ class Server extends EventEmitter {
2626
pingTimeout: 5000,
2727
pingInterval: 25000,
2828
upgradeTimeout: 10000,
29-
maxHttpBufferSize: 10e7,
29+
maxHttpBufferSize: 1e6,
3030
transports: Object.keys(transports),
3131
allowUpgrades: true,
3232
perMessageDeflate: {

0 commit comments

Comments
 (0)