Skip to content

Commit 7a9ef14

Browse files
committed
fix(security): disable akka dns (#14858)
1 parent b6ab37b commit 7a9ef14

File tree

1 file changed

+3
-0
lines changed

1 file changed

+3
-0
lines changed

datahub-frontend/conf/application.conf

Lines changed: 3 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -45,6 +45,9 @@ play.server.akka.max-header-size = ${?DATAHUB_AKKA_MAX_HEADER_VALUE_LENGTH}
4545
play.server.akka.max-header-value-length = 32k
4646
play.server.akka.max-header-value-length = ${?DATAHUB_AKKA_MAX_HEADER_VALUE_LENGTH}
4747

48+
# CVE-2023-31442
49+
akka.io.dns.resolver = "java"
50+
4851
# Update AUTH_COOKIE_SAME_SITE and AUTH_COOKIE_SECURE in order to change how authentication cookies
4952
# are configured. If you wish cookies to be sent in first and third party contexts, set
5053
# AUTH_COOKIE_SAME_SITE = "NONE" and AUTH_COOKIE_SECURE = true. If AUTH_COOKIE_SAME_SITE is "NONE",

0 commit comments

Comments
 (0)