Skip to content

Commit d07184d

Browse files
authored
[ES|QL] [Index editor] Limits the update operations to 1000 (elastic#246480)
## Summary Related to elastic#245533 After discussion with the elastic security team we decided to decrease the number to 1000. It seems as a reasonable number which doesnt degrade the feature
1 parent 5f13da4 commit d07184d

File tree

1 file changed

+2
-2
lines changed

1 file changed

+2
-2
lines changed

src/platform/plugins/shared/esql/server/routes/lookup_index.ts

Lines changed: 2 additions & 2 deletions
Original file line numberDiff line numberDiff line change
@@ -29,8 +29,8 @@ export const registerLookupIndexRoutes = (
2929
indexName: schema.string(),
3030
}),
3131
body: schema.object({
32-
// maxSize fixes: Unbounded array in schema validation vulnerability,
33-
operations: schema.arrayOf(schema.any(), { maxSize: 10000 }),
32+
// maxSize is added here to prevent DoS vulnerabilities https://github.com/elastic/kibana/pull/245533,
33+
operations: schema.arrayOf(schema.any(), { maxSize: 1000 }),
3434
}),
3535
},
3636
security: {

0 commit comments

Comments
 (0)