Section
9.1.3
Sub Level
General
Before authentication, the application should allocate only the minimum amount of resources needed to complete the authentication request.
Java

Avoid using readLine(). All forms of the readLine method in Readers andInputStreams are susceptible to a denial of service attack resulting in anOutOfMemoryError as they keep reading until they encounter a carriage return or line feed. Use read() with a size limit instead.

Natural Webagent
This is handled by EID authentication.