You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by jl...@apache.org on 2022/02/16 16:30:58 UTC

[ofbiz-framework] branch release22.01 updated: Improved: Error in uploading very large files, ie >2GB (OFBIZ-11534)

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release22.01
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release22.01 by this push:
     new 124eb38  Improved: Error in uploading very large files, ie >2GB (OFBIZ-11534)
124eb38 is described below

commit 124eb38abbd29f3d47fa050c325204342a19d9eb
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Wed Feb 16 17:15:24 2022 +0100

    Improved: Error in uploading very large files, ie >2GB (OFBIZ-11534)
    
    I reopened, forgot that you need to set -PjvmArgs, as I commented before:
    <<For a 2GB+ file you need to set Xmx to more than the double of the file size,
    eg: gradlew ofbiz -PjvmArgs="-Xms1024M -Xmx5048M">>
    
    This also adds information in security.properties:
    <<By default (OOTB) OFBiz is protected against Large File Denial of Service>>
---
 framework/security/config/security.properties | 4 ++++
 1 file changed, 4 insertions(+)

diff --git a/framework/security/config/security.properties b/framework/security/config/security.properties
index 45bad62..e2c1473 100644
--- a/framework/security/config/security.properties
+++ b/framework/security/config/security.properties
@@ -267,3 +267,7 @@ login.uris=login
 #-- If you need to use localhost or 127.0.0.1 in textareas URLs then you can uncomment the allowedProtocols property, here given as an example
 #-- You may also put other protocols you want to use, instead or with those
 allowedProtocols=localhost,127.0.0.1
+
+#-- By default (OOTB) OFBiz is protected against Large File Denial of Service because build.gradle defines -Xmx1024M
+#-- So you can at most upload a file around 500MB (see OFBIZ-11534 for more info)
+#-- If you need to upload larger files then follow https://nightlies.apache.org/ofbiz/trunk/readme/html5/#passing-jvm-runtime-options-to-ofbiz