From 46fd45d0cf96479ccea1888681fd31f767b6c3be Mon Sep 17 00:00:00 2001 From: Josh Date: Wed, 24 Sep 2025 11:18:07 -0400 Subject: [PATCH] fix(workflowenigne): stricter length headler handling Fixes #55276 and tidies things up a bit more for future maintenance. Signed-off-by: Josh --- apps/workflowengine/lib/Check/FileSize.php | 20 +++++++++++++++----- 1 file changed, 15 insertions(+), 5 deletions(-) diff --git a/apps/workflowengine/lib/Check/FileSize.php b/apps/workflowengine/lib/Check/FileSize.php index c1ee1d85ae9..078140e92cc 100644 --- a/apps/workflowengine/lib/Check/FileSize.php +++ b/apps/workflowengine/lib/Check/FileSize.php @@ -66,25 +66,35 @@ class FileSize implements ICheck { } /** - * @return string + * Gets the file size from HTTP headers. + * + * Checks 'OC-Total-Length' first; if unavailable and the method is POST or PUT, + * checks 'Content-Length'. Returns the size as int, float, or false if not found or invalid. + * + * @return int|float|false File size in bytes, or false if unavailable. */ protected function getFileSizeFromHeader() { if ($this->size !== null) { + // Already have it cached? return $this->size; } $size = $this->request->getHeader('OC-Total-Length'); if ($size === '') { - if (in_array($this->request->getMethod(), ['POST', 'PUT'])) { + // Try fallback for upload methods + $method = $this->request->getMethod(); + if (in_array($method, ['POST', 'PUT'], true)) { $size = $this->request->getHeader('Content-Length'); } } - if ($size === '') { - $size = false; + if ($size !== '' && is_numeric($size)) { + $this->size = Util::numericToNumber($size); + } else { + // No valid size header found + $this->size = false; } - $this->size = $size; return $this->size; }