Join GitHub today
GitHub is home to over 50 million developers working together to host and review code, manage projects, and build software together.Sign up
net/http: readRequest doesn't check URL length #38901
What version of Go are you using (
I think the existing https://golang.org/pkg/net/http/#Server.MaxHeaderBytes is probably sufficient here:
I'm having a hard time imagining somebody who wants to bound the request-line separately from the header lengths.
If so, they can do it in their Handler.