Re: [mod-security-users] Error processing request body: Multipart: invalid boundary encountered

[Ivan R. <iv...@we...>]

Sebastian Wiesinger wrote:
> Hi,
> 
> I'm getting the following error while a user is trying to edit a page
> in Typo3. Any suggestions where it comes from:

  Yes, the format of the multipart payload is invalid. I suspect
  the browser ("User-Agent: Mozilla/4.0 (compatible; MSIE 5.23; Mac_PowerPC)")
  is broken.


> mod_security-message: Access denied with code 500. Error processing
> request body: Multipart: invalid boundary encountered:
> -----------------------------047485629054451\x0a

  According to the spec all lines must end in CRLF. In the above case the
  CR (\x0d) is missing.

  You can disable request body buffering for that user alone to
  work around the problem.

  Considering there is a steady number of multipart-related problems
  I will consider adding options to allow fine control of the multipart
  parser.

-- 
Ivan Ristic, Technical Director
Thinking Stone, http://www.thinkingstone.com
ModSecurity: Open source Web Application Firewall