j3d1/webvirtcloud
1
0
Fork 0
mirror of https://github.com/retspen/webvirtcloud synced 2026-11-08 11:16:47 +00:00
Code Issues Projects Releases Wiki Activity

fix(nginx): a request body is at most 64 MiB

Browse source 
Every route accepted a 1 GiB body, and nginx buffers a body to disk
before the panel can refuse it: anyone, without an account, could fill
that disk with large requests sent slowly and never finished. The one
large body is an ISO upload's chunk, 32 MiB (storage_page.js); the limit
is now 64 MiB.

Checked with nginx and this config: 33 and 64 MiB pass to the panel,
65 MiB is answered 413.
This commit is contained in:
catborise 2026-11-06 19:50:20 +03:00
parent ce8d5d3e17
commit bb490101fd
1 changed files with 4 additions and 1 deletions
Download patch file Download diff file Expand all files Collapse all files

5
conf/nginx/webvirtcloud.conf
View file

@ -29,7 +29,10 @@ server {
proxy_connect_timeout 1800;
proxy_read_timeout 1800;
proxy_send_timeout 1800;
client_max_body_size 1024M;
# an ISO upload sends 32 MiB chunks; nothing else is large. nginx
# buffers a body to disk before the panel sees it: a bigger limit
# lets anyone fill that disk with unfinished requests
client_max_body_size 64M;
}
location /novncd/ {