From: <de...@de...> - 2011-08-04 22:06:40
|
Author: PeterThoeny Date: 2011-08-04 17:06:33 -0500 (Thu, 04 Aug 2011) New Revision: 21890 Trac url: http://develop.twiki.org/trac/changeset/21890 Modified: twiki/trunk/core/lib/TWiki/Search.pm Log: Item6784: Fix for DoS on bin/search with an asterisk wildcard using bookview Modified: twiki/trunk/core/lib/TWiki/Search.pm =================================================================== --- twiki/trunk/core/lib/TWiki/Search.pm 2011-08-04 20:01:47 UTC (rev 21889) +++ twiki/trunk/core/lib/TWiki/Search.pm 2011-08-04 22:06:33 UTC (rev 21890) @@ -449,6 +449,9 @@ } $limit = 32000 unless( $limit ); + # Limit DoD attack, Item6784: DoS on bin/search whith an asterisk wildcard + $limit = 64 if( $doBookView && $limit > 64 ); + $type = 'regex' if( $params{regex} ); my $mixedAlpha = $TWiki::regex{mixedAlpha}; |