[Nottingham] Silly big attachments in ownCloud *Calendars*

[Mike Cardwell]

* on the Wed, Nov 26, 2014 at 04:27:02PM +0000, Martin wrote:

> Folks,
> Just had a bit of a giggle just now whereby a few 100MBytes of file
> attachments were added into a calendar entry!...

...
 
> Is there an easy fix to not have the silly big attachments accepted in
> the first place?
> 
> Either on ownCloud, CALDAV, or postgres? Or all?

Assuming you have Apache in front of it, you can probably bend LimitRequestBody
to your purpose:

https://httpd.apache.org/docs/2.2/mod/core.html#limitrequestbody

You can limit it to a particular location in a particular vhost, so you could
upload a test attachment and tail the logs to find what needs blocking...

Be careful though. It wouldn't surprise me to find out that some caldav clients
will just keep trying to upload the file over and over, silently.

-- 
Mike Cardwell  https://grepular.com https://emailprivacytester.com
OpenPGP Key    35BC AF1D 3AA2 1F84 3DC3   B0CF 70A5 F512 0018 461F
XMPP OTR Key   8924 B06A 7917 AAF3 DBB1   BF1B 295C 3C78 3EF1 46B4
-------------- next part --------------
A non-text attachment was scrubbed...
Name: signature.asc
Type: application/pgp-signature
Size: 598 bytes
Desc: Digital signature
URL: <http://mailman.lug.org.uk/pipermail/nottingham/attachments/20141126/ea94901a/attachment.pgp>