Soeren,
>As far as I understood the maxFileSize init parameter
>for the action servlet should limit the maximum file
>size of the file uploaded to the server.
>If I set this to 200K I can still upload files with more the 2MB. :(
I'll check this out today, look for a commit later tonight if I can
reproduce the problem.
>In the struts upload example application it's done within the
>UploadAction.java. However this is the wrong place to do it.
The reason for doing this is that the file's contents are stored in a
request attribute, and storing a large file in the request attribute
could possibly cause an OutOfMemoryError, that's the only reason. The
upload application is just an example of how to use the basic functionality
of the upload package.
>Because the file is then temporarily written to disk, which
>is a possible security risk.
Could you elaborate?
