You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@nifi.apache.org by "Sash Sujith (Jira)" <ji...@apache.org> on 2024/08/09 20:13:00 UTC
[jira] [Commented] (NIFI-12762) ListenHTTP request headers limited to 8192 bytes
[ https://issues.apache.org/jira/browse/NIFI-12762?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17872443#comment-17872443 ]
Sash Sujith commented on NIFI-12762:
------------------------------------
{code:java}
public void testLargeHTTPRequestHeader() throws Exception {
StringBuilder largeHeaderValue = new StringBuilder();
for (int i = 0; i < 8193; i++){
largeHeaderValue.append("A");
} final int port = startWebServer(); OkHttpClient client = new OkHttpClient(); final String url = buildUrl(false, port);
Request request = new Request.Builder()
.url(url)
.addHeader("Large-Header", largeHeaderValue.toString())
.build(); try (Response response = client.newCall(request).execute()) {
int statusCode = response.code(); assertEquals(431, statusCode, "Expected 431 status code due to large header.");
}
}
{code}
> ListenHTTP request headers limited to 8192 bytes
> ------------------------------------------------
>
> Key: NIFI-12762
> URL: https://issues.apache.org/jira/browse/NIFI-12762
> Project: Apache NiFi
> Issue Type: Bug
> Affects Versions: 1.25.0, 2.0.0-M2
> Reporter: Michael W Moser
> Assignee: Sash Sujith
> Priority: Minor
> Attachments: Screenshot from 2024-07-12 19-52-19-1.png
>
>
> ListenHTTP will parse HTTP request headers if the property "HTTP Headers to receive as Attributes" is set. An HTTP client can sent request headers that are larger than the default allowed 8192 bytes, and we get the log message
> {noformat}
> 2024-02-08 20:22:16,548 WARN [ListenHTTP (8a290f74-018d-1000-a9d2-c06fdb10e3f3) Web Server-188] org.eclipse.jetty.http.HttpParser Header is too large 8193>8192{noformat}
> and ListenHTTP responds with HTTP ERROR 431 Request Header Fields Too Large
> The NiFi UI and REST API sets the max header size to 16384 and it is configurable in nifi.properties "nifi.web.max.header.size", in the file FrameworkServerConnectorFactory.java.
> We should probably allow ListenHTTP to use the same max header size setting.
> Should we also look into this for HandleHttpRequest?
--
This message was sent by Atlassian Jira
(v8.20.10#820010)