Opened 12 months ago

Last modified 12 months ago

#34968 closed Cleanup/optimization

MultiPartParser silent large header fields size failures — at Initial Version

Reported by: Standa Opichal Owned by: nobody
Component: HTTP handling Version: 4.2
Severity: Normal Keywords:
Cc: Triage Stage: Ready for checkin
Has patch: yes Needs documentation: no
Needs tests: no Patch needs improvement: no
Easy pickings: no UI/UX: no

Description

The MultiPartParser silently ignores parts of which the http header fields exceed 1024 bytes.

This is caused by the 1024 value being hardcoded here https://github.com/django/django/blob/main/django/http/multipartparser.py#L743

Also reported at https://stackoverflow.com/questions/70572148/django-silently-discarding-uploaded-files-with-long-paths

Change History (0)

Note: See TracTickets for help on using tickets.
Back to Top