Grails3 file upload maxFileSize limit

by

Grails 3, Grails 4 and Grails 5

The solution is to set maxFileSize and maxRequestSize limits inside your application.yml file (usually placed inside grails-app/conf/). Be sure to have something like this:

grails:
    controllers:
        upload:
            maxFileSize: 2000000
            maxRequestSize: 2000000

Replace 2000000 with the number of max bytes you want for a file upload and for the entire request. Grails 3, Grails 4 and Grails 5 default is 128000 (~128KB).

FAQ

1. How to convert from MB to bytes?

YOUR_MAX_SIZE_IN_MB * 1024 * 1024 = BYTES

E.g. Convert 5 MB in bytes

5 * 1024 * 1024 = **5242880** bytes

2. Security

As OWASP says

Limit the file size to a maximum value in order to prevent denial of service attacks

So these limits exist to prevent DoS attacks and to enforce overall application performance (bigger request size == more memory used from the server).

3. What is the right value for maxFileSize and maxRequestSize?

It depends on the application type, but it’s generally a bad idea to keep them too high. If you really need to upload big files, probably you should develop (or use) a dedicated (and separated) service.

More Related Contents:

  1. Grails unable to install plugin
  2. Accessing the raw body of a PUT or POST request
  3. Connect to H2 database using IntelliJ database client
  4. How to access Grails configuration in Grails 2.0?
  5. Does Grails 2.3.x Support JDK 8
  6. Why should grails actions be declared as methods instead of closures and what difference does it make?
  7. How to run a local plugin in Grails 2.0?
  8. Overriding grails.views.default.codec=’html’ config back to ‘none’
  9. Spring Boot Remove Whitelabel Error Page
  10. How to access a value defined in the application.properties file in Spring Boot
  11. What is this spring.jpa.open-in-view=true property in Spring Boot?
  12. How to calculate elapsed time from now with Joda-Time?
  13. Spring-Boot Jersey: allow Jersey to serve static content
  14. Spring Boot – Environment @Autowired throws NullPointerException
  15. Why did Spring framework deprecate the use of Guava cache?
  16. Externalising Spring Boot properties when deploying to Docker
  17. How to get custom user info from OAuth2 authorization server /user endpoint
  18. Problem with deserialization of LocalDateTime in Junit test
  19. Use Keycloak Spring Adapter with Spring Boot 3
  20. Spring Security 5 : There is no PasswordEncoder mapped for the id “null”
  21. Spring Boot shutdown hook
  22. How to convert a Spring-Boot web service into a Docker image?
  23. How to disable spring-data-mongodb autoconfiguration in spring-boot
  24. Best way of handling entities inheritance in Spring Data JPA
  25. Jackson date-format for OffsetDateTime in Spring Boot
  26. Using @RequestParam for multipartfile is a right way?
  27. How can I Stop/start/Pause a @JmsListener (the clean way)
  28. Where to handle Exceptions in Spring Applications
  29. How to add a custom health check in spring boot health?
  30. @SpringBootTest vs @ContextConfiguration vs @Import in Spring Boot Unit Test

Leave a Comment