HP StorageWorks Command View XP Advanced Edition Device Manager Agent Installation and Configuration Guide (December 2005)

Device Manager Agent Operations 61
Table 3-8 server.properties File
Property Description
server.http.headers.maxNumber (see Note) This property allows you to specify the maximum
number of HTTP headers that are permitted by the Web
server function of the Device Manager agent. By limiting
the impact of malicious requests that have a large
number of headers, this setting can be useful in
repelling attacks that are intended to impair services or
cause a buffer overflow. Normally, the default value of
this property need not be changed. The Device
Manager agent ignores any HTTP header exceeding
this number, without generating a message. No Device
Manager agent run-time errors occur, even when such
HTTP headers are ignored.
Default: 50.
server.http.headers.maxLength (see Note) Specify the maximum length (in bytes) of an HTTP
header that is permitted by the Web server function of
the Device Manager agent. Normally, the default value
of this property need not be changed. By limiting the
impact of malicious requests that have an abnormally
large header field, this setting can be useful in repelling
attacks that are intended to impair services or cause a
buffer overflow. The Device Manager agent
automatically truncates any HTTP header longer than a
specified length. Even when such HTTP headers are
truncated, no error occurs during the execution of the
Device Manager agent.
Default: 1024.
server.http.entity.maxLength (see Note) Specify the maximum size (in bytes) of HTTP request
entities permitted by the Web server function of the
Device Manager agent. Normally, the default value of
this property need not be changed. By limiting the
impact of malicious requests with an entity with an
abnormally large data size, this setting can be useful in
repelling attacks that are intended to impair services or
cause a buffer overflow. When detecting a post request
larger than the specified limit, the Device Manager
agent sends a remote error response and records
details of the request in the log.
Default: 1024.