[nfebe]

When downloading multiple files as a ZIP archive, filenames were appended to the URL as query parameters, causing "414 Request-URI Too Long" errors with many files.

Backend now supports POST requests with files in request body. Frontend sends files via FormData in POST body instead of URL params.

Fixes #7935

[hirokawaguchi]

We hit this on a production Nextcloud 35.0.1 (Apache 2.4.58, PHP-FPM through mod_proxy_fcgi, HTTP/1.1). Selecting files with long Japanese names failed at about 20 files. The Files app reported "The requested files are not available." The request never reached the app: a probe of ?accept=zip&files= returned 401 at 8000 bytes and 414 at 8500, which matches Apache's default LimitRequestLine of 8190.

Raising LimitRequestLine is not enough on this stack. A query of about 20KB got past Apache and then failed with 500. The error log was AH02536: couldn't encode envvar 'QUERY_STRING' in 16384 bytes from mod_proxy_fcgi. One FastCGI PARAMS record cannot hold a single environment variable larger than 16KB, so the file list has to leave the query string.

The hidden form POST in this PR is the approach that worked for us. On 35.0.1 we taught ZipFolderPlugin to read files from an application/x-www-form-urlencoded body when ?accept=zip is set, and changed the multi-file action to submit that form instead of putting the JSON in the URL (a HEAD of the short folder URL, then POST). A body of 400 Japanese filenames, 28006 bytes, came back as 401 NotAuthenticated from Sabre rather than 414 or 500, so the size limit was no longer in the way. A normal form submit also keeps the browser's download dialog, which the earlier blob/XHR attempt could not.

We still carry that as a local patch because this host stays on 35.0.1. Happy to retest once this lands.

[CarlSchwan]

/backport! to stable33

[susnux]

Suggested change

	$query = $request->getQueryParameters();
	// POST requests pass the parameters in the request body,
	// as other plugins do not support query parameters on POST requests
	$params = $request->getMethod() === 'POST' ? $request->getPostData() : $query;
	$params = $request->getMethod() === 'POST'
	? $request->getPostData()
	: $request->getQueryParameters();

?

[susnux]

So this now adds a custom WebDAV extension on POST for Nextcloud.
Maybe we need to specific feature flag to prevent conflicts directly, e.g. a specific header that marks the request as "download files".