You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Setting desync_mitigation_mode to strictest breaks clients that
aren't strictly RFC 7230 compliant (notably, AWS API Gateway).
Setting this attribute to defensive provides sufficent protection
against desync attacks, while still allowing requests from clients
that we can't perfect.
https://en.wikipedia.org/wiki/Robustness_principle
0 commit comments