[jira] Updated: (WICKET-1230) Temporary files not deleting when multipart upload fails with IO error

["Yaroslav Malyshev (JIRA)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/WICKET-1230?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Yaroslav Malyshev updated WICKET-1230:
--------------------------------------

    Attachment: FileUploadBase.java

Fixed file with deleting temporary files on error

> Temporary files not deleting when multipart upload fails with IO error
> ----------------------------------------------------------------------
>
>                 Key: WICKET-1230
>                 URL: https://issues.apache.org/jira/browse/WICKET-1230
>             Project: Wicket
>          Issue Type: Bug
>          Components: wicket
>    Affects Versions: 1.3.0-rc1
>            Reporter: Yaroslav Malyshev
>            Priority: Critical
>         Attachments: FileUploadBase.java
>
>
> I just want to delete temporary files when upload fails (user cancelled or IO error occured), this is really important when uploading files about 500Mb, and this bug makes security hole (anyone can eating my server's disk space by posting incomplete large files).
> I can't  find simple workaround, and I think that fix by developers will more easy.
> For example you can handle IO error in class org.apache.wicket.util.upload.FileUploadBase, method parseRequest, when IO error occured, just delete all created temporary files, and only after deleting files throw your FileUploadException.
> I hope you will fix it soon.
> Thanks.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.