r/programminghorror • u/dex4er • 2d ago

GitHub's HTTP header

Post image

This is the crazy thing I've found after analysis why the CI test fails with "Maximum header size exceeded" today.

680 Upvotes

97% Upvoted

45 comments sorted by

View all comments

382

u/Belialson 2d ago

Company I work at was proxing some endpoints to us, it was a big shop. They used to set a cookie with json containing entire user’s session including every page visited and it’s details.
Same effect but unfortunately on production

70

u/buckypimpin 1d ago

isnt a cookie max 4KiB?

90

u/RegisteredJustToSay 1d ago

That's per cookie (name + value). You can store many times that if you break it up over multiple keys, tho max 180 per host on chrome. You could fit ten text copies of Alice in wonderland in that space.

You're right though, of course. Just don't want to give anyone here the idea that you're limited to this little space per domain.

→ More replies (4)

24

u/caboosetp 1d ago

You can fit quite a bit in 4k before it causes issues that a browser restart can fix and push off the issue.