hi coderman,

icreasing the headerr_size is not a solution, since i look for a generic solution to circumvent
the outcome of those malicious request.

a possible way to handle this is a lighweight WAF-solution,
lua comes to my mind :)



regards,

mex

p.s. we're working on a lighweight lua-based waf as addition to naxsi; but this is very
early alpha atm, more on this later.