Temporary files not deleting when multipart upload fails with IO error
----------------------------------------------------------------------
Key: WICKET-1230
URL: https://issues.apache.org/jira/browse/WICKET-1230
Project: Wicket
Issue Type: Bug
Components: wicket
Affects Versions: 1.3.0-rc1
Reporter: Yaroslav Malyshev
Priority: Critical
I just want to delete temporary files when upload fails (user cancelled or IO
error occured), this is really important when uploading files about 500Mb, and
this bug makes security hole (anyone can eating my server's disk space by
posting incomplete large files).
I can't find simple workaround, and I think that fix by developers will more
easy.
For example you can handle IO error in class
org.apache.wicket.util.upload.FileUploadBase, method parseRequest, when IO
error occured, just delete all created temporary files, and only after deleting
files throw your FileUploadException.
I hope you will fix it soon.
Thanks.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
