> > It's probably worth noting that I get the same
reaction from the browser
> > when Caudium cuts off an overly large request (due
to the maximum post
> > size being reached). Personally, I'd rather see a
specific response (like
> > a 5xx error) from the server, rather than the
request being processed
> > with a cut-off.
>
> Digging into server/etc/modules/Caudium.pmod/Const.pmod
and "413 Request
> Entity Too Large" and "414 Request-URI Too
Large" looks interresting.
> I'm currently offline thus i can't check the RFC to be
sure about what
> this means, yet.
After having red a bit of RFC 2616, my understanding is that
413 is more
appropriate.
More, Apache seems to return 413 when using Gallery too:
http://gallery.
menalto.com/node/25612
> > Thoughts?
> The default maximum POST body size is currently set to
65kb, which seems
> way too less.
Digital picture usually weight around 1MB.
Emails limit is usually at 5MB.
A default 5MB limit would be nice for a webmail application.
Anyone sees
a potential breach with this?
--
Bertrand
|