2

I want to know what security vulnerabilities could have a website that in the name field there is no character limitation. so there could be 100 characters or 10k. My first idea is that it can could lead to DoS to the platform and other users but is that true? are other issues to be concern?

  • it will not directly create a vulnerability but its better to think about data processing from the backend. – Isuru Thilakarathne Jun 6 at 7:36
6

It is not really relevant if there is a size limit in the HTML form fields. Such size limits are only a client side restriction which is also only enforced by some clients (browsers). As with other checks done only at the client-side it is easy to write a client which ignores such restrictions.

All what is relevant in this case is how the submitted data are handled on the server side and this can not be determined just from looking at the HTML at the client side.

1

It can increase chances of buffer overflow attacks against your code, against the web server, or against the underlying OS.

Also if you happen to end up with a XSS or SQL injection vulnerability on that field, your lack of a length limit gives the attacker full reign to inject any content they want including large scripts like keyloggers or even full encoded binaries for example.

It's safer to enforce max length on all fields server side.

  • 1
    It will not increase the chance of attacks. It will increase the chance of a vulnerability being exploited. That's the important part, anyway. – schroeder Jun 11 at 12:27
  • @neonprimetime security yes but blind buffer overflows are insanly difficult, i don't have the experience to that yet haha. – Tomi Begher Jun 12 at 15:57
  • Difficult sure but I would not think that should be an excuse to leave a field with no max length. Especially a field like somebody's name that clearly has no business being 10k characters. – neonprimetime security Jun 13 at 2:46

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.