mirrors/prosody
1
0
Fork 0
mirror of https://github.com/bjc/prosody.git synced 2025-04-03 21:27:38 +03:00
Code Issues Projects Releases Packages Wiki Activity Actions

mod_http_file_share: Validate file size early in HTTP PUT request

Browse source
This commit is contained in:
Kim Alvefur 2021-01-27 17:47:04 +01:00
parent 02595598b0
commit 77e9e9eaa6
1 changed files with 5 additions and 0 deletions
Download patch file Download diff file Expand all files Collapse all files

5
plugins/mod_http_file_share.lua
View file

@ -165,6 +165,11 @@ function handle_upload(event, path) -- PUT /upload/:slot
module:log("debug", "Invalid upload slot: %q, path: %q", upload_info.slot, path);
return 400;
end
if request.headers.content_length and tonumber(request.headers.content_length) ~= upload_info.filesize then
return 413;
-- Note: We don't know the size if the upload is streamed in chunked encoding,
-- so we also check the final file size on completion.
end
local filename = dm.getpath(upload_info.slot, module.host, module.name, nil, true);