tomcat-dev mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "William A. Rowe Jr." <wr...@rowe-clan.net>
Subject Re: Connection draining when upload to large
Date Thu, 10 Feb 2011 21:51:22 GMT
On 2/10/2011 7:04 AM, Rainer Jung wrote:
> Servlet 3 standardizes file uploads. It contains the ability to limit on request size,
> pretty much the same as commons fileupload supported for many years.
> 
> It seems when this conditions triggers the rest of the request inout stream is still
> drained at the end of the request. swallowInput is not being set to false.
> 
> It seems there's still no server-side prevention against huge uploads possible. The upload
> is not put into memory, but the thread is only freed once the whole request body is read.
> Shouldn't Tomcat ignore the rest of data and close the connection in this case?

In HTTP, this is required if you will reject the request with a status.
The behavior is RFC-correct per Apache httpd's design, which has been
debated on plenty of occasions and the finger always goes back to
RFC 2616 correctness.

For non-HTTP connections, anything goes :)

---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscribe@tomcat.apache.org
For additional commands, e-mail: dev-help@tomcat.apache.org


Mime
View raw message