Skip to content

Upload using v1 chunking to blacklisted file gives 507 #36645

@phil-davis

Description

@phil-davis

Steps to reproduce

  1. set blacklisted_files to some file name(s) in config.php - e.g. ["blacklisted-file.txt",".htaccess"]
  2. use v1 chunking to try and upload a file called blacklisted-file.txt

Expected behaviour

HTTP status 403 (like when you try an ordinary upload, or upload using v2 chunking)

Actual behaviour

HTTP status 507

Server configuration

Current core master

See acceptance test scenarios in PR #36643 uploadFileUsingOldChunking.feature

Note:

  1. there is is similar behaviour if the file name matches one of the names in excluded_directories - so that "excluding directories" option is being processed in just the same way as blacklisted_files

  2. the upload does fail (i.e. it is effectively blacklisted). The problem is just that the HTTP 507 status is not "correct" (not consistent with 403 given by other upload methods)

Metadata

Metadata

Assignees

No one assigned

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions