[
https://issues.apache.org/jira/browse/WICKET-1230?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel#action_12552173
]
Yaroslav Malyshev commented on WICKET-1230:
-------------------------------------------
I attached my fixed file
> Temporary files not deleting when multipart upload fails with IO error
> ----------------------------------------------------------------------
>
> Key: WICKET-1230
> URL: https://issues.apache.org/jira/browse/WICKET-1230
> Project: Wicket
> Issue Type: Bug
> Components: wicket
> Affects Versions: 1.3.0-rc1
> Reporter: Yaroslav Malyshev
> Priority: Critical
> Attachments: FileUploadBase.java
>
>
> I just want to delete temporary files when upload fails (user cancelled or IO
> error occured), this is really important when uploading files about 500Mb,
> and this bug makes security hole (anyone can eating my server's disk space by
> posting incomplete large files).
> I can't find simple workaround, and I think that fix by developers will more
> easy.
> For example you can handle IO error in class
> org.apache.wicket.util.upload.FileUploadBase, method parseRequest, when IO
> error occured, just delete all created temporary files, and only after
> deleting files throw your FileUploadException.
> I hope you will fix it soon.
> Thanks.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
