Some Eclipse Foundation services are deprecated, or will be soon. Please ensure you've read this important communication.

Bug 362850

Summary:	Websocket allowing >125 octets on control frame payloads
Product:	[RT] Jetty	Reporter:	Joakim Erdfelt <joakim.erdfelt>
Component:	websocket	Assignee:	Joakim Erdfelt <joakim.erdfelt>
Status:	RESOLVED FIXED	QA Contact:
Severity:	normal
Priority:	P3	CC:	jetty-inbox
Version:	7.5.4
Target Milestone:	7.5.x
Hardware:	All
OS:	All
Whiteboard:

Description Joakim Erdfelt

2011-11-03 18:37:07 EDT

According to the spec
http://tools.ietf.org/html/draft-ietf-hybi-thewebsocketprotocol-17#section-5.5

   All control frames MUST have a payload length of 125 bytes or less
   and MUST NOT be fragmented.

Jetty WebSocket violates that requirement.

Comment 1 Joakim Erdfelt

2011-11-03 18:47:47 EDT

Fixed in master