- From: Luca Casonato <notifications@github.com>
- Date: Thu, 12 Jan 2023 13:38:48 -0800
- To: whatwg/fetch <fetch@noreply.github.com>
- Cc: Subscribed <subscribed@noreply.github.com>
Received on Thursday, 12 January 2023 21:39:00 UTC
The background on this, is that `formData` and `json` are prevalent ways to parse the request body in HTTP servers that use fetch's `Request` and `Response` headers:
```ts
Deno.serve(async (req) => {
const form = req.formData(); // you just created a DOS vuln!
// do something with form
return new Response();
});
--
Reply to this email directly or view it on GitHub:
https://github.com/whatwg/fetch/issues/1592#issuecomment-1381022437
You are receiving this because you are subscribed to this thread.
Message ID: <whatwg/fetch/issues/1592/1381022437@github.com>
Received on Thursday, 12 January 2023 21:39:00 UTC