https://bz.apache.org/bugzilla/show_bug.cgi?id=69710

--- Comment #6 from Aleksandr Beliakov <aleksandr.belia...@nowina.lu> ---
I did some tests, it seems like Tomcat mixes a number of fields and number of
files uploaded. On some of the forms, I have a limit of 5-10 files per form, on
others I cannot submit even a single file...

I would say either the code should validate the number of files more
explicitly, separating files number and fields number validation, or as a
temporary solution, increase the current value of maxPartCount parameter to
100.

We have some real-life scenarios with validation of documents from public
administrations, when a set of more than 30 files shall be provided. Therefore,
even a limit of 10 files is too small.

We propose to set the max file count (or maxPartCount) to 100. It still
decreases the previous value of 1000 (delivered from maxParameterCount in
Tomcat v11.0.7), but still big enough to support common scenarios.

Please note that also there exist limitations on a file size and a total size
of files submitted, thus the increase of maxPartCount to 100 won't impact the
security of existing systems.

-- 
You are receiving this mail because:
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@tomcat.apache.org
For additional commands, e-mail: dev-h...@tomcat.apache.org

Reply via email to