Comment 2 for bug 1251313

Revision history for this message
Dan Prince (dan-prince) wrote :

We never applied the wsgi request size limiting middleware to Glance because Glance does actually need to receive rather large files (images). This middleware was always sort of a "if all else fails" approach anyway because as Mark points out there other places (outside of Glance) where request size attacks might be better guarded against.

If we do add any sort of request size checks to glance we'll need to be sure to exclude requests which actually upload image data.