pomerium / pomerium / 27448162168

52%

Build Type

push

github

Committed by web-flow

Commit Message

envoyconfig: increase header size limits (#6449)

A recent Envoy security patch changes how the header size limits
interact with Cookie headers. Previously, Cookie headers could
potentially exceed the configured limits.

However the note in https://github.com/envoyproxy/envoy/issues/45483
suggests this patch may cause problems for legitimate traffic, and
provides alternative default header size limits that should still be
safe from a DoS perspective. Let's apply these new limits.

Coverage Stats

2 of 2 new or added lines in 1 file covered. (100.0%)

14 existing lines in 3 files now uncovered.

36916 of 70532 relevant lines covered (52.34%)

462.56 hits per line