title: Tomcat maxSavePostSize value?
body: <p>Tomcat Error <code>403 the request body was too large to be cashed during authentication process</code></p>
  
  <p>Its related to maxSavePostSize setting its currently default which is 4096 (4KB). In googling people suggest  -1 (unrestricted). Does that means it could be subject of DOS attack? What you suggest? </p>