SECURITY: API: Improve validation in chunked uploading
authorcsteipp <csteipp@wikimedia.org>
Tue, 8 Sep 2015 17:59:44 +0000 (10:59 -0700)
committerChad Horohoe <chadh@wikimedia.org>
Fri, 16 Oct 2015 21:10:44 +0000 (14:10 -0700)
commit59b627b0b7ad87317601f676a1ebd2441f63f59d
tree91a3526422fe99c2b38fa95870e3b2d0c9ad3e29
parentc8043915727cad35034a5c3fd4acb3afadc0e7b8
SECURITY: API: Improve validation in chunked uploading

This fixes a few shortcomings in the chunked uploader:
* Raises an error if offset + chunksize > filesize.
* Enforces a minimum chunk size for non-final chunks.
* Refuses additional chunks after seeing a final chunk.
* Status of a chunked upload in progress is now available with
  'checkstatus'.

Bug: T91203
Bug: T91205
Change-Id: I2262db1bc8460616b069c564475d2e4148001768
includes/DefaultSettings.php
includes/GlobalFunctions.php
includes/Setup.php
includes/api/ApiQuerySiteinfo.php
includes/api/ApiUpload.php