[Esapi-user] ESAPI - file Upload issue

Fri Jan 18 05:50:25 UTC 2013

Hi all,

We are securing web application using ESAPI WAF that is in UAT phase..
There has been an issue reported due to ESAPI which we are unable to find 
the solution..

There is a screen in the application where users can upload files 
(xls,word,pdf)
If the user upload files <10 MB, there is no issue..it is getting passed 
..
But suppose the file size is > 10 MB, the request is getting processed for 
a long time and there is no response on the screen..
This issues does not occur if ESAPI WAF is removed from web.xml..

On debugging, we found it is taking time in -

try {
                        request = new 
InterceptingHTTPServletRequest((HttpServletRequest)servletRequest);
                } catch (FileUploadException fue) {
                        logger.error(Logger.EVENT_SUCCESS,  "Error 
Wrapping Request", fue );
                }

also not throwing any exception..
Is there any configuration in ESAPI to resolve this ..

kindly let me know..

Thanks

Nithya B
=====-----=====-----=====
Notice: The information contained in this e-mail
message and/or attachments to it may contain 
confidential or privileged information. If you are 
not the intended recipient, any dissemination, use, 
review, distribution, printing or copying of the 
information contained in this e-mail message 
and/or attachments to it are strictly prohibited. If 
you have received this communication in error, 
please notify us by reply e-mail or telephone and 
immediately and permanently delete the message 
and any attachments. Thank you

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://lists.owasp.org/pipermail/esapi-user/attachments/20130118/5a0ae1e9/attachment.html>