Discovery zip fails to upload if any file within it is larger than 1MB

XMLWordPrintable

    • Type: Bug
    • Resolution: Fixed
    • Priority: Low
    • Component/s: Assets - Import
    • None
    • 3
    • Severity 2 - Major
    • 1

      Issue Summary

      Discovery import zip files cannot be uploaded if any file within is larger than 1MB uncompressed.

      Steps to Reproduce

      1. Create a Discovery import zip file, with at least one of the contained XML files inside being larger than 1MB.
      2. Create a new import, choose Discovery type, upload the zip file.

      Expected Results

      The file uploads successfully and can be imported.

      Actual Results

      The upload fails, with the following exception in the server logs:

      java.io.IOException: Zip bomb detected! The file would exceed the max size of the expanded data in the zip-file. This may indicates that the file is used to inflate memory usage and thus could pose a security risk. 

      Workaround

      Currently there is no known workaround for this behavior. A workaround will be added here when available

            Assignee:
            Bhupender Singh
            Reporter:
            oli
            Votes:
            1 Vote for this issue
            Watchers:
            5 Start watching this issue

              Created:
              Updated:
              Resolved: