detect: set HTTP SWF decompress limits

diff --git a/suricata.yaml.in b/suricata.yaml.in
index 8534f7ee9d5a0ffac13a81e48b262460cbb02454..c1e6c207f541e8fcf9735ea0641baaca07f1866b 100644 (file)
--- a/suricata.yaml.in
+++ b/suricata.yaml.in
@@ -872,8 +872,8 @@ app-layer:
            swf-decompression:
              enabled: yes
              type: both
-             compress-depth: 0
-             decompress-depth: 0
+             compress-depth: 100kb
+             decompress-depth: 100kb
 
            # Use a random value for inspection sizes around the specified value.
            # This lowers the risk of some evasion techniques but could lead