Uploaded image for project: 'PUBLIC - Liferay Portal Community Edition'
  1. PUBLIC - Liferay Portal Community Edition
  2. LPS-49280

Many tree-node-check fields are submitted when exporting a LAR

    Details

      Description

      Steps to reproduce:

      • Start liferay 6.2.x in jboss 7
      • Go to control panel- server administration - script console
      • Use attached script with groovy language. It adds 500 pages to default site
      • Go to Site Administration - Site pages - public pages - export
      • Selected Pages, Site Pages Settings, Theme Settings, Logo -> Click "Change"
      • Open chrome developer toolbar and select network - preserve log
      • Expand tree, select all pages and pulse ok
      • In developer toolbar - network, select manage request.
      • See Form data
      • In server, you could see this error:

      Caused by: java.lang.IllegalStateException: More than the maximum number of request parameters (GET plus POST) for a single request ([512]) were detected. Any parameters beyond this limit have been ignored. To change this limit, set the maxParameterCount attribute on the Connector.

      Here, there is one parameter per each page in the "select page" tree. If that tree had more than 500 nodes, then, the request will have more than 500 POST parameters. As result, some application servers tend to reject the request due security reasons:

      http://stackoverflow.com/questions/12277231/maximum-number-of-parameter-passed-in-a-post

      "The number of parameters was limited in all web servers to plug the hashmap collision denial of service attack."

        Attachments

          Activity

            People

            • Votes:
              0 Vote for this issue
              Watchers:
              2 Start watching this issue

              Dates

              • Created:
                Updated:
                Resolved:
                Days since last comment:
                6 years, 1 week, 4 days ago

                Packages

                Version Package
                7.0.0 M2