[issue41828] No longer able to override DATA_UPLOAD_MAX_MEMORY_SIZE outside of settings.py

[Drew Scholz]

New submission from Drew Scholz <drew.scholz at metergroup.com>:

After upgrading our Django 1.11 project from Python 2.7 to 3.7, our single endpoint decorator to override django conf settings no longer works. requests.py inside the virtual environment /lib/python3.7/site-packages/django/http triggers the RequestDataTooBig exception (~line 271) before the change to DATA_UPLOAD_MAX_MEMORY_SIZE has been increased by our decorator. We are able to make the change global inside settings.py however we are concerned with the security vulnerabilities due to the size we want to allow for the single endpoint.

----------
files: decorators.py
messages: 377293
nosy: drew.scholz
priority: normal
severity: normal
status: open
title: No longer able to override DATA_UPLOAD_MAX_MEMORY_SIZE outside of settings.py
type: security
versions: Python 3.7
Added file: https://bugs.python.org/file49470/decorators.py

_______________________________________
Python tracker <report at bugs.python.org>
<https://bugs.python.org/issue41828>
_______________________________________