What happened?
Multipart uploads are able to complete successfully even when the final uploaded object exceeds the configured single_file_upload_max_size_mib limit. This allows uploading files larger than the intended max size through the multipart upload flow.
How to reproduce?
How to reproduce?
-
Configure a small max upload size:
- Set
site_settings.key = single_file_upload_max_size_mib to 1 (1 MiB).
-
Start a multipart upload for a file larger than 1 MiB (e.g., 2 MiB) using the multipart endpoints.
-
Upload the parts and call finish.
-
Observe that the upload completes and the file is accessible despite exceeding the max.
Version
1.1.0-incubating (Pre-release/Master)
Commit Hash (Optional)
No response
What browsers are you seeing the problem on?
No response
Relevant log output