Configurable JSON parser limit (#51)

* Configurable JSON parser limit Signed-off-by: Gabriel Indik <[email protected]> * Limit in config file Signed-off-by: Gabriel Indik <[email protected]>
hyperledger · Jan 6, 2022 · 9e6abbe · 9e6abbe
1 parent 6fb2dfd
commit 9e6abbe
Show file tree

Hide file tree

Showing 4 changed files with 8 additions and 2 deletions.
diff --git a/src/app.ts b/src/app.ts
@@ -133,7 +133,7 @@ export const start = async () => {
   });
 
   apiApp.use(express.urlencoded({ extended: true }));
-  apiApp.use(express.json());
+  apiApp.use(express.json({limit: config.jsonParserLimit ?? utils.constants.DEFAULT_JSON_PARSER_LIMIT}));
   apiApp.use('/api/v1', apiRouter);
   apiApp.use(errorHandler);
 

diff --git a/src/lib/interfaces.ts b/src/lib/interfaces.ts
@@ -29,6 +29,7 @@ export interface IConfig {
     id: string
     endpoint: string
   }[]
+  jsonParserLimit?: string
 }
 
 export interface IFile {

diff --git a/src/lib/utils.ts b/src/lib/utils.ts
@@ -44,7 +44,8 @@ export const constants = {
   MAX_EVENT_QUEUE_SIZE: 1000,
   HASH_HEADER_NAME: 'dx-hash',
   SIZE_HEADER_NAME: 'dx-size',
-  LAST_UPDATE_HEADER_NAME: 'dx-last-update'
+  LAST_UPDATE_HEADER_NAME: 'dx-last-update',
+  DEFAULT_JSON_PARSER_LIMIT: '1mb'
 };
 const log = new Logger('utils.ts');
 axios.defaults.timeout = constants.REST_API_CALL_REQUEST_TIMEOUT;

diff --git a/src/schemas/config.json b/src/schemas/config.json
@@ -60,6 +60,10 @@
           }
         }
       }
+    },
+    "jsonParserLimit": {
+      "type": "string",
+      "pattern": "^\\d+(k|K|m|M|g|G|t|T|p|P)?(b|B)$"
     }
   }
 }