From 1e81f7293ef72a6e6dfeac7f0040c7b1d6362320 Mon Sep 17 00:00:00 2001 From: Josh Date: Wed, 24 Sep 2025 11:18:07 -0400 Subject: [PATCH] fix(workflowenigne): stricter length headler handling Fixes #55276 and tidies things up a bit more for future maintenance. Signed-off-by: Josh --- apps/workflowengine/lib/Check/FileSize.php | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/apps/workflowengine/lib/Check/FileSize.php b/apps/workflowengine/lib/Check/FileSize.php index 5ee03ccc9cf..04a0e3e5fb0 100644 --- a/apps/workflowengine/lib/Check/FileSize.php +++ b/apps/workflowengine/lib/Check/FileSize.php @@ -67,25 +67,35 @@ class FileSize implements ICheck { } /** - * @return string + * Gets the file size from HTTP headers. + * + * Checks 'OC-Total-Length' first; if unavailable and the method is POST or PUT, + * checks 'Content-Length'. Returns the size as int, float, or false if not found or invalid. + * + * @return int|float|false File size in bytes, or false if unavailable. */ protected function getFileSizeFromHeader() { if ($this->size !== null) { + // Already have it cached? return $this->size; } $size = $this->request->getHeader('OC-Total-Length'); if ($size === '') { - if (in_array($this->request->getMethod(), ['POST', 'PUT'])) { + // Try fallback for upload methods + $method = $this->request->getMethod(); + if (in_array($method, ['POST', 'PUT'], true)) { $size = $this->request->getHeader('Content-Length'); } } - if ($size === '') { - $size = false; + if ($size !== '' && is_numeric($size)) { + $this->size = Util::numericToNumber($size); + } else { + // No valid size header found + $this->size = false; } - $this->size = $size; return $this->size; }