huaweicloud-sdk-go-v3 icon indicating copy to clipboard operation
huaweicloud-sdk-go-v3 copied to clipboard

Published 20 hours ago • verified publisher icon huaweicloud

此处没有对读入的请求body体做大小等合法性校验，可能导致仿冒DOS攻击导致OOM风险

Open yuchuan512 opened this issue 2 years ago • 1 comments

https://github.com/huaweicloud/huaweicloud-sdk-go-v3/blob/4409ff4c1e62264a05a411652afc3b5febe4d370/core/hc_http_client.go#L230

image

yuchuan512 avatar May 15 '22 02:05 yuchuan512

发请求有ssl证书校验等安全措施，这里无法对响应体大小做校验，大小限制可能会对一些响应体偏大的接口，如下载文件接口造成影响

mawenbo-huawei avatar May 20 '22 01:05 mawenbo-huawei