tahoe-lafs/trac-2024-07-25

Loopy/Uninhibited/Overlarge Filename Makes Web Server Crump #1144

New issue

Open

opened 2010-08-01 05:04:23 +00:00 by chrisp · 1 comment

chrisp commented

2010-08-01 05:04:23 +00:00

Owner

I created a file in the pubgrid named "<<<<<..." (it's hundreds of less-than signs).

(a) it is double-HTML-encoded as described in a previous bug. I bet I could make a huge filename that freaks out your server.

(b) when I try to rename this file, I get "Connection was reset" error in my browser. This is repeatable, and specific to this file. Other actions in the WUI are fine.

I created a file in the pubgrid named "<<<<<..." (it's hundreds of less-than signs). (a) it is double-HTML-encoded as described in a previous bug. I bet I could make a huge filename that freaks out your server. (b) when I try to rename this file, I get "Connection was reset" error in my browser. This is repeatable, and specific to this file. Other actions in the WUI are fine.

tahoe-lafs added the

labels 2010-08-01 05:04:23 +00:00

tahoe-lafs added this to the undecided milestone 2010-08-01 05:04:23 +00:00

warner commented

2010-08-06 06:35:46 +00:00

Author

Owner

Huh, weird, I get the double-HTML-encoding, but I can rename and delete the file from the WUI just fine (firefox3.6).

It's a shot in the dark, but could you look in your BASEDIR/logs/twistd.log and see if there are any exceptions recorded there? "Connection reset" suggests the server/browser dropped the HTTP connection rather than e.g. a 500 Internal Server Error, but there might still be something informative in the tahoe logs.

Scrolling all the way to the right to find the delete/rename buttons is pretty annoying though..
doubly so to get past all the < strings :).

Huh, weird, I get the double-HTML-encoding, but I can rename and delete the file from the WUI just fine (firefox3.6). It's a shot in the dark, but could you look in your BASEDIR/logs/twistd.log and see if there are any exceptions recorded there? "Connection reset" suggests the server/browser dropped the HTTP connection rather than e.g. a 500 Internal Server Error, but there might still be something informative in the tahoe logs. Scrolling all the way to the right to find the delete/rename buttons is pretty annoying though.. doubly so to get past all the < strings :).

tahoe-lafs added

code-frontend-web

and removed

labels 2011-05-21 15:51:02 +00:00

Sign in to join this conversation.

No labels

LeastAuthority.com automation

cannot reproduce

code-frontend-cli

code-frontend-ftp-sftp

code-frontend-magic-folder

code-frontend-web

code-peerselection

dev-infrastructure

somebody else's problem

was already fixed

No milestone

No project

No assignees

1 participant

Notifications

Due date

The due date is invalid or out of range. Please use the format "yyyy-mm-dd".

No due date set.

Dependencies

No dependencies set.

Reference: tahoe-lafs/trac-2024-07-25#1144

No description provided.