We're making changes to the Community, so you may have received some notifications - thanks for your patience and welcome back. Learn more here.
Forum Discussion
Webhook max POST body size
Is there a maximum content length of the POST body in webhooks after which dropbox will chunk and make multiple webhooks. We are trying to see what the maximum size we can set on our side before rejecting the request to prevent any DOS attacks. Even though we can verify that dropbox is the one who made the post with the signature, we still have to read the body fully before verify signature.
Any other checks we can add on our side to prevent DOS attacks, like sender IP range etc?
Thanks,
Stephen C.14Dropbox Staff
Currently, Dropbox does not limit the size of the POST body in Webhooks, so unfortunately, you won't be able to use body size as a means to validate the request.
As far as your second question, beyond signature verification, I can't think of any additional means of verifying that the request is valid and from Dropbox.
