Is there an accepted maximum allowed size for HTTP headers? If so, what is it? If not, is this something that's server specific or is the accepted standard to allow headers of any size?
No, HTTP does not define any limit. However most web servers do limit size of headers they accept. For example in Apache default limit is 8KB, in IIS it's 16K. Server will return 413 Entity Too Large error if headers size exceeds that limit.
The default HTTP Request Header value is 8190 bytes.
The minimum and maximum values are 16 and 4096. If the header count exceeds the header limit, the connection is reset. You may perform the following procedure if the applications require header count greater than 64, you can increase the Maximum Header Count in the HTTP profile.
A payload header is an HTTP header that describes the payload information related to safe transport and reconstruction of the original resource representation, from one or more messages.
No, HTTP does not define any limit. However most web servers do limit size of headers they accept. For example in Apache default limit is 8KB, in IIS it's 16K. Server will return 413 Entity Too Large
error if headers size exceeds that limit.
Related question: How big can a user agent string get?
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With