Re: HttPrevayler

This proxy can be easily DOSed unless it has a really, really short
timeout for browser requests. The attacker just need to send the first
part of a request and wait. No other requests will be processed at
that moment.

On Thu, Jun 11, 2009 at 12:43 AM, Klaus
Wuestefeld<[email protected]> wrote:
> We do not have that case. I would estimate only 0.72% of websites out
> there have that case.
>
> But it would, yes, require a workaround.
>
> One solution could be to make the browser upload the file directly to
> some temp staging area on the web server, bypassing the proxy
> completely, and then just sending a "File XYZ upload completed"
> request to the proxy. That is transparent to the end-user, of course.
>
> Klaus.
>
>
>
> On Wed, Jun 10, 2009 at 6:32 PM, Sergey Didenko<[email protected]> wrote:
>> What if a user uploads a big file on a slow connection?
>>
>>> The web app must process one transaction request at a time anyway or
>>> else determinism is lost.
>>>
>>> So we are supposing there are no long-running transaction requests.
>>>
>>> Klaus.
>>
>> ------------------------------------------------------------------------------
>> Crystal Reports - New Free Runtime and 30 Day Trial
>> Check out the new simplified licensing option that enables unlimited
>> royalty-free distribution of the report engine for externally facing
>> server and web deployment.
>> http://p.sf.net/sfu/businessobjects
>> _______________________________________________
>> To unsubscribe go to the end of this page: http://lists.sourceforge.net/lists/listinfo/prevayler-discussion
>> _______________________________________________
>> "Databases in Memoriam" -- http://www.prevayler.org
>>
>
> ------------------------------------------------------------------------------
> Crystal Reports - New Free Runtime and 30 Day Trial
> Check out the new simplified licensing option that enables unlimited
> royalty-free distribution of the report engine for externally facing
> server and web deployment.
> http://p.sf.net/sfu/businessobjects
> _______________________________________________
> To unsubscribe go to the end of this page: http://lists.sourceforge.net/lists/listinfo/prevayler-discussion
> _______________________________________________
> "Databases in Memoriam" -- http://www.prevayler.org
>

------------------------------------------------------------------------------
Crystal Reports - New Free Runtime and 30 Day Trial
Check out the new simplified licensing option that enables unlimited
royalty-free distribution of the report engine for externally facing 
server and web deployment.
http://p.sf.net/sfu/businessobjects
_______________________________________________
To unsubscribe go to the end of this page: http://lists.sourceforge.net/lists/listinfo/prevayler-discussion
_______________________________________________
"Databases in Memoriam" -- http://www.prevayler.org