[WICKET-1230] Temporary files not deleting when multipart upload fails with IO error

• Type: Bug
• Status: Closed
• Priority: Critical
• Resolution: Fixed
• Affects Version/s: 1.3.0-rc1
• Fix Version/s: 1.3.0-final
• Component/s: wicket
• Assignee: Johan Compagner
• Reporter: Yaroslav Malyshev
• Created: 15/Dec/07 21:16
• Updated: 29/Dec/07 14:30
• Resolved: 16/Dec/07 17:47

Description

I just want to delete temporary files when upload fails (user cancelled or IO error occured), this is really important when uploading files about 500Mb, and this bug makes security hole (anyone can eating my server's disk space by posting incomplete large files).

I can't find simple workaround, and I think that fix by developers will more easy.

For example you can handle IO error in class org.apache.wicket.util.upload.FileUploadBase, method parseRequest, when IO error occured, just delete all created temporary files, and only after deleting files throw your FileUploadException.

I hope you will fix it soon.
Thanks.