-
Notifications
You must be signed in to change notification settings - Fork 1.9k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
DoSFilter leaks USER_AUTH entries #1256
Comments
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions. |
This issue has been automatically marked as stale because it has been a full year without activity. It will be closed if no further activity occurs. Thank you for your contributions. |
This issue has been automatically marked as stale because it has been a |
This issue has been automatically marked as stale because it has been a |
6 year and counting! We should make this a priority once jetty 12 is released |
Use only IP tracking for the DosFilter to fix #1256 Signed-off-by: gregw <gregw@webtide.com>
Use only IP tracking for the DosFilter. Signed-off-by: gregw <gregw@webtide.com>
Use only IP tracking for the DosFilter. Fix defaults Signed-off-by: gregw <gregw@webtide.com>
DoSFilter
automatically removesRateTracker
entries that belong to typeUSER_IP
orUSER_SESSION
, but not the other types.DoSFilter
also needs a code review because for example exposesRateTracker
as a return type of a public method, butRateTracker
is package private and so it's not possible to override the method.The text was updated successfully, but these errors were encountered: