Skip to content

Conversation

peter-gribanov
Copy link

If there are more input variables on the string than specified by max_input_vars directive, then further input variables are truncated from the request.

If a request signature based on a parameter list is used for authorization, then after the parameter list is truncated, the signature will not match and the user will receive an authorization error. An unobvious problem is that the user can use a maximum of 998 parameters, since the last parameters will be occupied by the signature of the request and the username that is used on the server to verify the signature.

Of course, for queries with a large number of parameters, it is better to use JSON, but the authorization error and the limit of 998 parametersin this case are not at all obvious.

…_input_vars directive, then further input variables are truncated from the request
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

1 participant