Menu

#118 Request overriding Limits of virus_scan

modules-0.5.x
open
nobody
None
1
2019-07-04
2019-07-04
Anonymous
No

Even if there is an max limit configured in the virus_scan module config.
An client can overwrite this limit if he use the direct url instead of the alias.
I see two solutions for this problem.
a) Allow to block the direct access of virus_scan
b) An way to block overriding the configured limites via request.

/virus_scan?allow204=on&sizelimit=off&mode=simple
/avscan

Discussion

Anonymous
Anonymous

Add attachments
Cancel