default max_form_memory_size to 500kB

pallets / werkzeug

The comprehensive WSGI web application library.

https://werkzeug.palletsprojects.com

BSD 3-Clause "New" or "Revised" License

6.66k stars 1.73k forks source link

default max_form_memory_size to 500kB #2965

Closed davidism closed 4 weeks ago

davidism commented 4 weeks ago

We already use SpooledTemporaryFile to write file fields to disk after 500kB. Applying a 500kB limit to non-file form fields in memory is a reasonable default. Also expand the existing documentation about the limits available on Request.

fixes #2964