New submission from Drew Scholz <drew.sch...@metergroup.com>:

After upgrading our Django 1.11 project from Python 2.7 to 3.7, our single 
endpoint decorator to override django conf settings no longer works. 
requests.py inside the virtual environment 
/lib/python3.7/site-packages/django/http triggers the RequestDataTooBig 
exception (~line 271) before the change to DATA_UPLOAD_MAX_MEMORY_SIZE has been 
increased by our decorator. We are able to make the change global inside 
settings.py however we are concerned with the security vulnerabilities due to 
the size we want to allow for the single endpoint.

----------
files: decorators.py
messages: 377293
nosy: drew.scholz
priority: normal
severity: normal
status: open
title: No longer able to override DATA_UPLOAD_MAX_MEMORY_SIZE outside of 
settings.py
type: security
versions: Python 3.7
Added file: https://bugs.python.org/file49470/decorators.py

_______________________________________
Python tracker <rep...@bugs.python.org>
<https://bugs.python.org/issue41828>
_______________________________________
_______________________________________________
Python-bugs-list mailing list
Unsubscribe: 
https://mail.python.org/mailman/options/python-bugs-list/archive%40mail-archive.com

Reply via email to