Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Can I crash this service by loading a large dependency in the HTML? #17

Open
ntnz opened this issue Nov 14, 2023 · 1 comment
Open

Can I crash this service by loading a large dependency in the HTML? #17

ntnz opened this issue Nov 14, 2023 · 1 comment

Comments

@ntnz
Copy link

ntnz commented Nov 14, 2023 •
edited
Loading

This service works by downloading assets in the HTML provided by the front end (fonts, CSS, etc). What's stopping me from providing a massive asset in the HTML crashing the service? This could be mitigated by using translateURLsToAbsolute and locking down the service internet access, but that seems like a work around. you could just provide thousands of allowed assets.

Are there any mitigations for this built into the service?
@ntnz
Copy link
Author

ntnz commented Nov 15, 2023

https://forum.bryntum.com/viewtopic.php?p=134498#p134498

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Assignees
No one assigned
Labels
None yet
Projects
None yet
Milestone
No milestone
Development

No branches or pull requests
1 participant
@ntnz