Why is a request that exceeds the specified maxRequestLength responds with a (apparently) irrelevant error?

Question

I pointed maxRequestLengthin my web.config (MVC) like this:

  <location path="File/Upload">
    <system.web>
      <httpRuntime maxRequestLength="330"/>
    </system.web>
  </location>

When you look at the network tab when testing to download files exceeding 330 kilobytes, I see that the answer is from the server 500, and the details areThe required anti-forgery form field "__RequestVerificationToken" is not present.

Why is this so? Is the structure unable to provide details maxRequestLengthin the response? Or does he just not want to not give out information about the system?

Or is it that my request was truncated / trimmed in order to satisfy the limit that accidentally ended the request validation token?

Note

This works fine with files that do not exceed 330kb, and my download works.

Answer 1

, maxRequestLength 330, . :

1 Mb = 1024kb

:

https://msdn.microsoft.com/en-us/library/system.web.configuration.httpruntimesection.maxrequestlength(v=vs.110).aspx

, maxRequestLength = "330", , 330kb.

Answer 2

, ( , ) [ValidateAntiForgeryToken] - , .

[ValidateAntiForgeryToken] , , , , .

Answer 3

, , ASP.NET MVC location web.config. , ASP.NET, , ASP.NET MVC . , , , , .

- auth?

, , "".

, 500 Internal Server Error, , - , web.config - .

As for the antiforgery marker error, make sure it is present in your view (using @ Html.AntiForgeryToken () ) and that no script removes it from the DOM before you submit the form