[HTTPS:W] Header length exceeded.

[robertgregor]

Hi, I am getting this error, when I submit seems long GET request with a lot of parameters: i.e.: Request URL: http://192.168.1.104/deviceconfig?timeZone=1&dl=Off&batop=Off&mdns=Testmdns&notifperiod=600&moduleid=123456&loglevel=3&logdest=0&enckey=&outcounter=0&incounter=0&_=1608300579947 Referrer Policy: strict-origin-when-cross-origin Accept: / Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9,cs-CZ;q=0.8,cs;q=0.7 Cache-Control: no-cache Connection: keep-alive Host: 192.168.1.104 Pragma: no-cache Referer: http://192.168.1.104/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 X-Requested-With: XMLHttpRequest

Do you have an idea, why I have such behavior? Is it because of long GET request??? Because when I am using the request like that i.e. it works. And headers are the same: Request URL: http://192.168.1.104/loadmainpreferences?_=1608300580006 Request Method: GET Status Code: 200 OK Remote Address: 192.168.1.104:80 Referrer Policy: strict-origin-when-cross-origin Connection: keep-alive Content-Length: 363 Content-Type: application/json Accept: application/json, text/javascript, /; q=0.01 Accept-Encoding: gzip, deflate Accept-Language: en-US,en;q=0.9,cs-CZ;q=0.8,cs;q=0.7 Cache-Control: no-cache Connection: keep-alive Host: 192.168.1.104 Pragma: no-cache Referer: http://192.168.1.104/ User-Agent: Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/87.0.4280.88 Safari/537.36 X-Requested-With: XMLHttpRequest

[fhessel]

The limit is configured here. Allowing for arbitrary lengths would directly lead to a memory exhaustion vulnerability, so there are hard limits.

If you're using PlatformIO, you can override the configuration in your platformio.ini file to a value that covers your longest request strings:

build_flags += -DHTTPS_REQUEST_MAX_REQUEST_LENGTH=512

[robertgregor]

I see. So the issue it the lenhth of the GET request. So probably the error shall be, that no header length exceeded, but the get request exceeded.