Hi umbraco community, is theer a way to set reques...
# help-with-umbraco
z
We are facing a vulnerability called Slow Http Post vulnerability and one of the remedies is to set a timeout on requests.
m
Perhaps the following middleware will help you—though it seems like a complex issue considering the myriad of different requests Umbraco/web apps need to handle at times. https://learn.microsoft.com/en-us/aspnet/core/performance/timeouts?view=aspnetcore-8.0
z
Thanks Mark, I've seen this. I think this is dotnet core v8. This means that I need to upgrade to v13 and we dont have time for that
m
You could try setting the execution timeout in IIS? https://stackoverflow.com/questions/2414441/how-to-increase-request-timeout-in-iis I don't know if there would be any consequences with Umbraco, if you edited this on in IIS! However I would recommend setting up a WAF on the front of the site such as Cloudflare or Azure Front Door. Cloudflare probably being the easiest to get started with.
8 Views