Undocumented new feature dos_protection

[jensens]

The dos_protection section in zope.conf

Zope/src/Zope2/Startup/wsgischema.xml

Line 416 in efadec2

<section type="dos_protection" handler="dos_protection"

is not documented:

• not here https://zope.readthedocs.io/en/latest/search.html?q=dos_protection
• and not here https://github.com/search?q=org%3Azopefoundation%20dos_protection&type=code

see also plone/Products.CMFPlone#3848

[jensens]

Well, now it finds it. Glitch in the search? Very strange.

[yurj]

It is not documented how to disable it. Setting -1 maybe can work but should be documented.

[d-maurer]

Yuri wrote at 2023-9-27 02:49 -0700:

It is not documented how to disable it. Setting -1 maybe can work but should be documented.

When I remember right, it cannot be disabled with a fixed value (if I am wrong `0` is likely that value): the parameters come from `multipart`, the third party library we use for the parsing of `multipart/form-data`. When I remember right, I did nothing to support a disabling value at the other (non `multipart`) places. Use sufficiently large values to effectively disable the feature.