I´m building a web app that allows users to upload files < 5MB, and for this I´m using Request.ParseMultipartForm(5000000), but I´m wondering what happens if a funny guy tries to upload a file bigger than 5MB, documentation is not clear enough https://golang.org/pkg/net/http/#Request.ParseMultipartForm
The whole request body is parsed and up to a total of maxMemory bytes of its file parts are stored in memory, with the remainder stored on disk in temporary files
So, how long "temporary files" really means? because it´s a little ambiguous, does that mean that remaining file will be erase after the handler function returns? or does mean that has a lifetime determined? I wouldn´t want my app to crash if some guys try to do this and I run out of disk space.
Temporary files live for the duration of the request. Parsing of the form and the creation of the temp files are handled by the mime/multipart package.
When the server finishes the request, it calls Form.RemoveAll to delete any temporary files associated with the form data.