Uploaded image for project: 'Moodle'
  1. Moodle
  2. MDL-72050

File API attempted denial-of-service mitigation blocks legitimate uses

XMLWordPrintable

    • Icon: Bug Bug
    • Resolution: Fixed
    • Icon: Critical Critical
    • 4.4.8, 4.5.4
    • 3.5.18, 3.9.7, 3.10.4, 3.11, 4.0.8, 4.1.3, 4.2, 4.4.7, 4.5, 4.5.1, 5.0
    • Files API

      The heuristic added in MDL-69028 is not very good, and can block legitimate users.

      Stepts to reproduce:

      1. Go to: https://tjh238.vledev3.open.ac.uk/moodle_head/question/import.php?courseid=2
      2. Import the attached file: Qs with lots of images.xml (which is Moodle XML format).
      3. Go to: Go to: https://tjh238.vledev3.open.ac.uk/moodle_head/question/import.php?courseid=2
      4. Try to add the file to the form again.*

      Expected result: you can (obviously, in real use, you are more likely to want to upload a different file the second time, but for our testing, using the same file twice should be fine.)

      Actual result: The file upload is blocked with pop-up message "Your file uploads are temporarily limited after you uploaded a high volume of files. Please wait then try again."

      That's odd, so far, I have only uploaded 2 files, right?

            stefan.hanauska Stefan Hanauska
            timhunt Tim Hunt
            Tim Hunt Tim Hunt
            Shamim Rezaie Shamim Rezaie
            Ron Carl Alfon Yu Ron Carl Alfon Yu
            Votes:
            30 Vote for this issue
            Watchers:
            33 Start watching this issue

              Created:
              Updated:
              Resolved:

                Estimated:
                Original Estimate - Not Specified
                Not Specified
                Remaining:
                Remaining Estimate - 0 minutes
                0m
                Logged:
                Time Spent - 1 hour, 38 minutes
                1h 38m

                  Error rendering 'clockify-timesheets-time-tracking-reports:timer-sidebar'. Please contact your Jira administrators.