Access is denied on form submit when too many data in form

[David Gonneau]

I'm getting an incredible behaviour of internet explorer.
I have a generated html page with one form and many input of checkbox
type.
Those checkbox are grouped in 4 lists and each list of checkbox
contain checkboxs with the same name so I can easily retrieve on my
server side (java) wich checkbox are checked with a
request.getParameterValues(). (Each checkbox has a value corresponding
to the id of the row)
Anyway that's not on the server that the problem is.

Here it comes. When more than 132 checkboxes are checked, my form
submit generate a javascript error. When 132 or less checkboxes are
checked it submit without problem.

I tested the page with firefox, the problem is not here with that
browser and it can submit liek for example 400 checkboxes.

Then I tried to make a workaround, on submiting I browse the elements
list of my document and I create a big string containing all the ids
checked and then I uncheck all checkboxes and submit. there again it
fail to work.

I'm really affraid I'm looking at a nasty bug of Internet explorer
here and I'm going to engineer a more deep workaround if noone can
point out a solution to me.

I should precise that I have no iframes on that page. I indeed saw
that some people got 'access is denied' on submit form but in my case
it works when not too much data is going to be submited !

Many thanks by advance.

 

[Jim Ley]

I tested the page with firefox, the problem is not here with that
browser and it can submit liek for example 400 checkboxes.

I just tested IE submitting 12000 checkboxes without problem. Access
denies is a javascript error, it's very unlikely without a script you
could produce an access denied, so there's something you're not
telling us about your situation.

Of course you've not provided any code, or an example page for us to
look at, so how do you expect us to provide advice?

Jim.

 

[Matt Kruse]

Here it comes. When more than 132 checkboxes are checked, my form
submit generate a javascript error. When 132 or less checkboxes are
checked it submit without problem.

Is your form using method="get" by any chance?

I've noticed errors when the form data is too long for IE to generate a URL
within it's URL size limits. Instead of a nice error message, it gives
javascript errors or some other mysterious symptoms.

Try using method="post" and see if the problem goes away.

 

[VK]

IE imposes 2048 bytes limit on the URL string.

After the last year "address stack overflow" attacks they also put some
restrictions on the hash part of the URL.

Use GET only for short submissions. Use POST instead in your case.

Evidently Netscape clones either not vulnerable to the SO attacks (I hope
so), or they simply don't care (I hope not).