detect: set HTTP SWF decompress limits

4 years ago · af13d4de18
parent 4a1482a1cf
commit af13d4de18
1 changed files with 2 additions and 2 deletions
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@ -872,8 +872,8 @@ app-layer:
           swf-decompression:
             enabled: yes
             type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb

           # Use a random value for inspection sizes around the specified value.
           # This lowers the risk of some evasion techniques but could lead