Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

POST Forms are limited to 128 fields with netty-codec-http dependency >= 4.1.108.Final #10825

Open
jamcole opened this issue May 14, 2024 · 0 comments

Comments

@jamcole
Copy link

jamcole commented May 14, 2024

Expected Behavior

The Netty DEFAULT_MAX_FIELDS setting in HttpPostRequestDecoder should be configurable in Micronaut or set to -1 to behave as prior versions of Micronaut.

Actual Behaviour

Netty throws a TooManyFormFieldsException if posts are made with more than 128 fields by default because of the changes merged into 4.1.108.Final related to GHSA-5jpm-x58v-624v

Steps To Reproduce

While using any version of Micronaut greater than or equal to 4.3.12

  1. Create a POST form with more than 128 fields (such as a table with many checkboxes)
  2. Submit form

Environment Information

No response

Example Application

No response

Version

4.3.12

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

No branches or pull requests

1 participant