DO NOT REPLY TO THIS EMAIL, BUT PLEASE POST YOUR BUG RELATED COMMENTS THROUGH THE WEB INTERFACE AVAILABLE AT <http://issues.apache.org/bugzilla/show_bug.cgi?id=28062>. ANY REPLY MADE TO THIS MESSAGE WILL NOT BE COLLECTED AND INSERTED IN THE BUG DATABASE.
http://issues.apache.org/bugzilla/show_bug.cgi?id=28062 Coccon upload-max-size parameter does not prevent file upload Summary: Coccon upload-max-size parameter does not prevent file upload Product: Cocoon 2 Version: 2.1.3 Platform: PC OS/Version: Linux Status: NEW Severity: Critical Priority: Other Component: general components AssignedTo: [EMAIL PROTECTED] ReportedBy: [EMAIL PROTECTED] Overview Description: Attmepting to upload a file that exceeds the upload-max-size parameter in the web.xml does not throw an error until the entire file has been processed. Steps to Reproduce: 1) Upload a file larger than the upload-max-size parameter set in the web.xml from a browser with the enable-uploads parameter in the web.xml set to true. Actual Results: When the org.apache.cocoon.servlet.multipart.RequestFactory parses the mulitpart data and places the org.apache.cocoon.servlet.multipart.Part object in the request (either org.apache.cocoon.servlet.multipart.PartOnDisk or org.apache.cocoon.servlet.multipart.PartInMemory) the entire file (of any size) is uploaded by the browser, Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040207 Firefox/0.8, despite a java.io.IOException that is thrown when the upload-max-size param in the web.xml is exceeded, before an error page is presented. Expected Results: An error should have been presented prior to the entire file being uploaded by the browser. Build Date & Platform: 03/30/04 build with 2.1.3 on Red Hat 9 WS Additional Builds and Platforms: - Occurs On Mozilla/5.0 (X11; U; Linux i686; en-US; rv:1.6) Gecko/20040207 Firefox/0.8 - Doesn't Occur On ? Additional Information: The java.io.IOException is included here: ERROR (2004-03-30) 11:24.02:738 [access] (Unknown-URI) Unknown-thread/CocoonServlet: Problem with Cocoon servlet java.io.IOException: Content length exceeds maximum upload size. at org.apache.cocoon.servlet.multipart.RequestFactory.getServletRequest(RequestFactory.java:105) at org.apache.cocoon.servlet.CocoonServlet.service(CocoonServlet.java:1019) at javax.servlet.http.HttpServlet.service(HttpServlet.java:853) at weblogic.servlet.internal.ServletStubImpl$ServletInvocationAction.run(ServletStubImpl.java:971) at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:402) at weblogic.servlet.internal.ServletStubImpl.invokeServlet(ServletStubImpl.java:305) at weblogic.servlet.internal.WebAppServletContext$ServletInvocationAction.run(WebAppServletContext.java:6350) at weblogic.security.acl.internal.AuthenticatedSubject.doAs(AuthenticatedSubject.java:317) at weblogic.security.service.SecurityManager.runAs(SecurityManager.java:118) at weblogic.servlet.internal.WebAppServletContext.invokeServlet(WebAppServletContext.java:3635) at weblogic.servlet.internal.ServletRequestImpl.execute(ServletRequestImpl.java:2585) at weblogic.kernel.ExecuteThread.execute(ExecuteThread.java:197) at weblogic.kernel.ExecuteThread.run(ExecuteThread.java:170)