[jira] Updated: (WICKET-3525) Fileupload: full request body is read even when it is known that it is larger than the max allowed size

["Attila Király (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/WICKET-3525?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Attila Király updated WICKET-3525:
----------------------------------

          Component/s:     (was: wicket-auth-roles)
                       wicket-core
           Issue Type: Improvement  (was: Bug)
    Affects Version/s: 1.5-RC2

Further debugging showed that this is done by the servlet container (both jetty and tomcat) so it might be not posible to do anything about it in wicket.

> Fileupload: full request body is read even when it is known that it is larger than the max allowed size
> -------------------------------------------------------------------------------------------------------
>
>                 Key: WICKET-3525
>                 URL: https://issues.apache.org/jira/browse/WICKET-3525
>             Project: Wicket
>          Issue Type: Improvement
>          Components: wicket-core
>    Affects Versions: 1.5-RC2
>            Reporter: Attila Király
>
> Steps to reproduce (works with all major browers, I suggest using Chrome for this because it shows the upload progress status with a percentage in the lower left/right corner):
> 1. Go to http://www.wicket-library.com/wicket-examples/upload/single
> 2. Choose a file significantly larger than 100KB (app's max allowed size) for the first form. Post the first form.
> 3. The post will take long because the file is uploaded and processed by the server.
> The browsers send the content-length header and wicket compares this with the max allowed upload size in o.a.w.util.upload.FileUploadBase.FileItemIteratorImpl.FileItemIteratorImpl(FileUploadBase, RequestContext). It detects that it is larger than allowed and throws an exception which brakes the input parsing started by the Form component. However the input is still processed by something else.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira