dpgaspar opened a new issue, #28400:
URL: https://github.com/apache/superset/issues/28400

   `CSV_UPLOAD_MAX_SIZE` only affects CSV uploads as the name implies, yet we 
have Excel and columnar upload also.
   Also this prevention should be made at the webserver level using 
`max_body_size` or similar.
   
   there are some trade offs here:
   pros:
   - Usually faster and more efficient as the web server can reject the request 
before it reaches the application code.
   - Helps to prevent denial-of-service attacks by limiting resource 
consumption.
   cons:
   - does not provide a nice server response


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org.apache.org

For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


---------------------------------------------------------------------
To unsubscribe, e-mail: notifications-unsubscr...@superset.apache.org
For additional commands, e-mail: notifications-h...@superset.apache.org

Reply via email to