3 ms·
> Paul points out that alternative paths such as WebSockets might bypass limits that are in place for regular HTTP requests <
by CodeWriter23 2y ago
> Paul points out that alternative paths such as WebSockets might bypass limits that are in place for regular HTTP requests <
- zbentley 2y agoI'm not sure I interpret that as trusting the client; rather, it seems like the implication is that HTTP limits will be handled correctly by webserver harnesses, whereas WebSockets may not get any such behavior "for free" from the server framework.
- echoangle 2y agoHe’s saying that some Webservers allow you to limit request size, but the limits you set might only apply to HTTP(S) and can be circumvented when using another protocol. That’s a server side problem.
- Sohcahtoa82 2y agoIs English not your first language? If it is, I am utterly baffled as how you think that's an endorsement trusting the client, rather than merely a description.