A valid point that I have not considered. Since parseParameters() is not called until you get the request parameters or parts, a developer could getInputStream() and parse all the parts/parameters themselves, thereby completely skipping the maxPostSize checks. Thanks for correcting me here, Mark.
Nick -----Original Message----- From: Mark Thomas [mailto:ma...@apache.org] Sent: Friday, December 14, 2012 3:17 PM To: Tomcat Users List Subject: Re: Does maxPostSize has an effect on file upload? On 14/12/2012 19:58, Williams, Nick wrote: > (Note: It's entirely possible that I'm reading the code wrong. Yes you are. Not completely wrongly but there are errors. The short version is as follows: If Tomcat is responsible for reading the request body such as via a call to a method like getParameters(), getParts() etc. then Tomcat will apply the maxPostSize limit. If the application is responsible for reading the request body then the limit does not apply. Hence if an application uses a third-party file upload library or just calls getInputStream() or getReader() the limit will not apply. Mark --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org This e-mail may contain privileged or confidential information. If you are not the intended recipient: (1) you may not disclose, use, distribute, copy or rely upon this message or attachment(s); and (2) please notify the sender by reply e-mail, and then delete this message and its attachment(s). Underwriters Laboratories Inc. and its affiliates disclaim all liability for any errors, omissions, corruption or virus in this message or any attachments. --------------------------------------------------------------------- To unsubscribe, e-mail: users-unsubscr...@tomcat.apache.org For additional commands, e-mail: users-h...@tomcat.apache.org
