Arlolra has submitted this change and it was merged.

Change subject: Limit time spent running image helpers.
......................................................................


Limit time spent running image helpers.

Fixes [[Inupiat]].

Depends on: I916cd37ac69e41ffc64430d2f506b7d5208e1145
Change-Id: I06796e56de9e38dfe5c7f7663b12553187fc72ea
---
M LocalSettings.js
1 file changed, 2 insertions(+), 0 deletions(-)

Approvals:
  Arlolra: Verified; Looks good to me, approved



diff --git a/LocalSettings.js b/LocalSettings.js
index 06d0ed9..b3bb1c4 100644
--- a/LocalSettings.js
+++ b/LocalSettings.js
@@ -13,6 +13,8 @@
        // DoS prevention: limit bundle sizes to 512MB
        
config.backend.bundler.additionalArgs.push('--image-size-limit=500000000');
        
config.backend.bundler.additionalArgs.push('--bundle-size-limit=536870912');
+       // DoS prevention: prevent running image helpers for excessive times
+       
config.backend.writers.rdf2latex.additionalArgs.push('--helper-exec-limit=300');
        // DoS prevention: limit job CPU time to 1hr.
        var CPU_LIMIT_SECS = 60 * 60 /* 1 hour, in seconds */;
        config.backend.bundler.max_execution_time = CPU_LIMIT_SECS;

-- 
To view, visit https://gerrit.wikimedia.org/r/171754
To unsubscribe, visit https://gerrit.wikimedia.org/r/settings

Gerrit-MessageType: merged
Gerrit-Change-Id: I06796e56de9e38dfe5c7f7663b12553187fc72ea
Gerrit-PatchSet: 2
Gerrit-Project: mediawiki/services/ocg-collection
Gerrit-Branch: wmf-deploy
Gerrit-Owner: Cscott <canan...@wikimedia.org>
Gerrit-Reviewer: Arlolra <abrea...@wikimedia.org>

_______________________________________________
MediaWiki-commits mailing list
MediaWiki-commits@lists.wikimedia.org
https://lists.wikimedia.org/mailman/listinfo/mediawiki-commits

Reply via email to