#1144 new defect

Loopy/Uninhibited/Overlarge Filename Makes Web Server Crump

Reported by: chrisp Owned by: nobody
Priority: major Milestone: undecided
Component: code-frontend-web Version: 1.7.1
Keywords: security names wui Cc:
Launchpad Bug:

Description

I created a file in the pubgrid named "<<<<<..." (it's hundreds of less-than signs).

(a) it is double-HTML-encoded as described in a previous bug. I bet I could make a huge filename that freaks out your server.

(b) when I try to rename this file, I get "Connection was reset" error in my browser. This is repeatable, and specific to this file. Other actions in the WUI are fine.

Change History (2)

comment:1 Changed at 2010-08-06T06:35:46Z by warner

Huh, weird, I get the double-HTML-encoding, but I can rename and delete the file from the WUI just fine (firefox3.6).

It's a shot in the dark, but could you look in your BASEDIR/logs/twistd.log and see if there are any exceptions recorded there? "Connection reset" suggests the server/browser dropped the HTTP connection rather than e.g. a 500 Internal Server Error, but there might still be something informative in the tahoe logs.

Scrolling all the way to the right to find the delete/rename buttons is pretty annoying though.. doubly so to get past all the &lt; strings :).

comment:2 Changed at 2011-05-21T15:51:02Z by davidsarah

  • Component changed from unknown to code-frontend-web
  • Keywords security names wui added
Note: See TracTickets for help on using tickets.