yesodweb/wai

wai-extra: Safe handling of temp files that exceed configured limits

ocramz opened this issue · 7 comments

ocramz commented

parseRequestBodyEx contains calls to error that will crash a server if it handles file requests that exceed limits; this behaviour seems to be a Denial of Service but with extra steps.

What if we had a safe variant of parseRequestBodyEx that instead throws an exception or accumulates file limit violations?

I'd be willing to implement this feature in case.

kazu-yamamoto commented

Merged via #972.

ocramz commented

Thanks @kazu-yamamoto ! Could you release this on Hackage too, or are you waiting for other patches to get in first? Thanks!

kazu-yamamoto commented

@snoyberg Would you give me the upload permission for wai-extra to Hackage?

  • 👍1
snoyberg commented

Absolutely, you should have access now.

  • 👍1
kazu-yamamoto commented

@snoyberg Thanks.

A new version has been released.

ocramz commented

Hi @kazu-yamamoto thank you for releasing so quickly ! However why did you change the version number without updating it in the cabal file and changelog? 9d2f7d8

kazu-yamamoto commented

I changed the version in the cabal file since 3.1.14 is not registered on Hackage.
I forgot to update changelog.