Opened at 2010-08-01T05:04:23Z
Last modified at 2011-05-21T15:51:02Z
#1144 new defect
Loopy/Uninhibited/Overlarge Filename Makes Web Server Crump
| Reported by: | chrisp | Owned by: | nobody |
|---|---|---|---|
| Priority: | major | Milestone: | undecided |
| Component: | code-frontend-web | Version: | 1.7.1 |
| Keywords: | security names wui | Cc: | |
| Launchpad Bug: |
Description
I created a file in the pubgrid named "<<<<<..." (it's hundreds of less-than signs).
(a) it is double-HTML-encoded as described in a previous bug. I bet I could make a huge filename that freaks out your server.
(b) when I try to rename this file, I get "Connection was reset" error in my browser. This is repeatable, and specific to this file. Other actions in the WUI are fine.
Change History (2)
comment:1 Changed at 2010-08-06T06:35:46Z by warner
comment:2 Changed at 2011-05-21T15:51:02Z by davidsarah
- Component changed from unknown to code-frontend-web
- Keywords security names wui added
Note: See
TracTickets for help on using
tickets.
Huh, weird, I get the double-HTML-encoding, but I can rename and delete the file from the WUI just fine (firefox3.6).
It's a shot in the dark, but could you look in your BASEDIR/logs/twistd.log and see if there are any exceptions recorded there? "Connection reset" suggests the server/browser dropped the HTTP connection rather than e.g. a 500 Internal Server Error, but there might still be something informative in the tahoe logs.
Scrolling all the way to the right to find the delete/rename buttons is pretty annoying though.. doubly so to get past all the < strings :).