Skip to content
Critiq Docs

Search docs

Search documentation pages and rules

security.misconfiguration

Avoid excessive Fastify body limits

Fastify applications should not disable body limits or configure unusually large defaults without compensating controls.

#Metadata

Rule ID
ts.security.fastify-excessive-body-limit
Severity
medium
Confidence
0.76
Languages
javascript, typescript
Presets
recommended, security, strict
Stability
experimental
Applies to
block
Tags
fastify, rules-catalog, security

#Why it matters

Oversized bodies amplify denial-of-service risk on services without upstream buffering limits.

#Remediation

Lower `bodyLimit`, enforce route-specific caps, or terminate traffic behind an API gateway or proxy that caps body size.

#Repository path

The generated metadata points to critiq-rules/libs/rules/catalog/rules/typescript/ts.security.fastify-excessive-body-limit.rule.yaml.