readerQuotas
is a property of Windows Communication Foundation (WCF) Web services. By configuring its values, it can be used to place restrictions on the size and complexity of SOAP messages, which are processed by a WCF endpoint.
These restrictions are useful to protect against a type of Denial of Service (DOS) attacks where message complexity, rather than simply length, is used to bog down endpoint processing resources. The properties that define these constraints, as well as their default values, are listed below:
MaxDepth
= 32MaxStringContentLength
= 8192MaxArrayLength
= 16384MaxBytesPerRead
= 4096MaxNameTableCharCount
= 16384