Set max header length for HTTP

We see constant attempts to hack our play backend with illegal/large header lengths.
can we set max http server header length using akka.http.server.parsing.max-method-length limit? also can we reject any methods with illegal characters ?