detect: set HTTP SWF decompress limits

(cherry picked from commit af13d4de18)
6 years ago · 6fb346ee00
parent 01384bc780
commit 6fb346ee00
1 changed files with 2 additions and 2 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -872,8 +872,8 @@ app-layer:
           swf-decompression:
             enabled: yes
             type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb

           # Use a random value for inspection sizes around the specified value.
           # This lowers the risk of some evasion techniques but could lead