Il giorno 03/mag/2012, alle ore 11:53, Łukasz Wróblewski ha scritto: > Hi, > > I have set harakiri and everything works fine, however, is the specific > situation (upload URL) where I would abolish harakiri, but only for that > single URL. How to do it?
If you enable post-buffering you will trigger a specific harakiri behaviour on http request with a body: whenever a chunk is received, the harakiri is reset. Obviously this is a security flaw (as disabling harakiri) a bad-guy can abuse with something like slowloris. I suggest you to mitigate the problem limiting the post body (--limit-post) If you have a buffering server (like nginx) before uWSGI, that problem does not exist (or better: it is highly mitigated) -- Roberto De Ioris http://unbit.it JID: [email protected] _______________________________________________ uWSGI mailing list [email protected] http://lists.unbit.it/cgi-bin/mailman/listinfo/uwsgi
