hc-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From bugzi...@apache.org
Subject DO NOT REPLY [Bug 35728] - getResponseBody always logs messages
Date Sat, 16 Jul 2005 16:10:54 GMT
DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG·
RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT
<http://issues.apache.org/bugzilla/show_bug.cgi?id=35728>.
ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND·
INSERTED IN THE BUG DATABASE.

http://issues.apache.org/bugzilla/show_bug.cgi?id=35728





------- Additional Comments From odi@odi.ch  2005-07-16 18:10 -------
Jilles,

A final statement. Use of these methods is risky becaue they have a very simple
implementation. That's why they issue the warning. If you need to buffer anyway
use getResponseAsStream and copy the stuff into a byte array or so. Then you
have fully control over checking for out of memory conditions.

If you continue to use getResponseAsString you expose your software to a denial
of service attack. Just to quiet the logs is bad. It is like hiding bad code
from your customer. Write better code and the message disappears.

Ortwin Glück

-- 
Configure bugmail: http://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug, or are watching the assignee.

---------------------------------------------------------------------
To unsubscribe, e-mail: httpclient-dev-unsubscribe@jakarta.apache.org
For additional commands, e-mail: httpclient-dev-help@jakarta.apache.org


Mime
View raw message