This commit is contained in:
Jörg Prante 2021-04-30 16:15:25 +02:00
parent 3c903db4ef
commit e951774a5d

View file

@ -25,9 +25,8 @@ import java.util.Map;
* <pre>
* {@link QueryStringDecoder} decoder = new {@link QueryStringDecoder}("recipient=world&amp;x=1;y=2", false);
* </pre>
* <h3>HashDOS vulnerability fix</h3>
* As a workaround to the <a href="http://netty.io/s/hashdos">HashDOS</a> vulnerability, the decoder
* limits the maximum number of decoded key-value parameter pairs, up to {@literal 1024} by
* HashDOS vulnerability fix: As a workaround to the <a href="http://netty.io/s/hashdos">HashDOS</a> vulnerability,
* the decoder limits the maximum number of decoded key-value parameter pairs, up to {@literal 1024} by
* default, and you can configure it when you construct the decoder by passing an additional
* integer parameter.
*/