From 74d13d3a8d08d42cc6306a7efead9d11babbd42b Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Fri, 18 Oct 2024 15:31:54 +0100 Subject: [PATCH] Note that max HTTP request head size semantics are server-specific Closes gh-40798 --- .../boot/autoconfigure/web/ServerProperties.java | 6 +++++- 1 file changed, 5 insertions(+), 1 deletion(-) diff --git a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java index a8610bee0d1..ae4ea2a4974 100644 --- a/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java +++ b/spring-boot-project/spring-boot-autoconfigure/src/main/java/org/springframework/boot/autoconfigure/web/ServerProperties.java @@ -100,7 +100,11 @@ public class ServerProperties { private String serverHeader; /** - * Maximum size of the HTTP request header. + * Maximum size of the HTTP request header. Refer to the documentation for your chosen + * embedded server for details of exactly how this limit is applied. For example, + * Netty applies the limit separately to each individual header in the request whereas + * Tomcat applies the limit to the combined size of the request line and all of the + * header names and values in the request. */ private DataSize maxHttpRequestHeaderSize = DataSize.ofKilobytes(8);