BasicHttpBinding.ReaderQuotas Property

The complexity constraints provide protection from denial of service (DOS) attacks that attempt to use message complexity to tie up endpoint processing resources. Other complexity constraints include items such as a maximum element depth and a maximum length for string content within the message.

The following example sets ProxyAddress to application settings.

		BasicHttpBinding binding =
			new BasicHttpBinding();
		XmlDictionaryReaderQuotas readerQuotas = new XmlDictionaryReaderQuotas();
		readerQuotas.MaxArrayLength = 25 * 1024;
		
	        binding.ReaderQuotas = readerQuotas;

The value of this property can also be set in the configuration file.

<configuration>
  <system.serviceModel>

    <bindings>
      <basicHttpBinding>
        <binding name="Binding1">
          <readerQuotas maxBytesPerRead ="1000" 
                        maxDepth="100"/>

          <security mode="None" />
        </binding>
      </basicHttpBinding>
    </bindings>

  </system.serviceModel>

</configuration>

.NET Framework

.NET Framework Client Profile

Windows 7, Windows Vista SP1 or later, Windows XP SP3, Windows Server 2008 (Server Core not supported), Windows Server 2008 R2 (Server Core supported with SP1 or later), Windows Server 2003 SP2

Reference