Allow configuring JSON request body size limits (#16)

pouchdb · Nov 1, 2023 · 69e847a · 69e847a
1 parent 1a5098c
commit 69e847a
Show file tree

Hide file tree

Showing 2 changed files with 10 additions and 2 deletions.
diff --git a/lib/routes/db.js b/lib/routes/db.js
@@ -1,6 +1,10 @@
 'use strict';
 
-var jsonParser = require('body-parser').json({limit: '1mb'});
+var jsonParser = require('body-parser').json({
+ // Be careful when increasing JSON size limits:
+ // https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html#set-request-size-limits
+ limit: process.env.JSON_REQUEST_SIZE_LIMIT || '1mb',
+});
 var extend = require('extend');
 
 var utils = require('../utils.js');

diff --git a/lib/routes/document.js b/lib/routes/document.js
@@ -1,6 +1,10 @@
 'use strict';
 
-var jsonParser = require('body-parser').json({limit: '1mb'});
+var jsonParser = require('body-parser').json({
+ // Be careful when increasing JSON size limits:
+ // https://cheatsheetseries.owasp.org/cheatsheets/Nodejs_Security_Cheat_Sheet.html#set-request-size-limits
+ limit: process.env.JSON_REQUEST_SIZE_LIMIT || '1mb',
+});
 var multiparty = require('multiparty');
 var Promise = require('bluebird');
 var fs = fs = require('fs');