Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Fixes truncation of input parameters #672

Open
wants to merge 1 commit into
base: master
Choose a base branch
from

Conversation

peter-gribanov
Copy link

If there are more input variables on the string than specified by max_input_vars directive, then further input variables are truncated from the request.

If a request signature based on a parameter list is used for authorization, then after the parameter list is truncated, the signature will not match and the user will receive an authorization error. An unobvious problem is that the user can use a maximum of 998 parameters, since the last parameters will be occupied by the signature of the request and the username that is used on the server to verify the signature.

Of course, for queries with a large number of parameters, it is better to use JSON, but the authorization error and the limit of 998 parametersin this case are not at all obvious.

…_input_vars directive, then further input variables are truncated from the request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant