playframework/play — pull request #426 by eamelink (2012-01-04 08:07:35+00:00)
Title: Fix for #1353, hash collision vulnerability

This is a fix for #1353, it returns a 500 Internal Server Error if the number of post parameters exceeds a configurable amount that defaults to 1000. This will minimize impact of the hash collision attack.

It would be nicer to return a 314 Request Entity Too Large response though.