Enable asset download servlet
The default servlet in Experience Manager allows authenticated users to issue arbitrarily large, concurrent download requests for creating ZIP files of assets visible to them that can overload the server and the network. To mitigate potential DoS risks caused by this feature, AssetDownloadServlet
OSGi component is disabled by default for publish instances.
To allow downloading assets from your DAM, say when using something like Asset Share Commons or other portal-like implementation, manually enable the servlet via an OSGi configuration. Adobe recommends setting the permissible download size as low as possible without affecting the day-to-day download requirements. A high value may impact performance.
-
Create a folder with a naming convention that targets the publish runmode (
config.publish
):/apps/<your-app-name>/config.publish
. To define configuration properties for a run mode, see Run Modes. -
In the configuration folder, create a file of type
nt:file
namedcom.day.cq.dam.core.impl.servlet.AssetDownloadServlet.config
. -
Populate
com.day.cq.dam.core.impl.servlet.AssetDownloadServlet.config
with the following. Sets a maximum size (in bytes) for the download as value ofasset.download.prezip.maxcontentsize
. The below sample configures the maximum size of the ZIP download to not exceed 100 kB.enabled=B"true" asset.download.prezip.maxcontentsize=I"102400"
The Perfect Blend: A New Era of Collaboration with AEM and Workfront
Adobe Customer Success Webinars
Wednesday, Apr 2, 5:00 PM UTC
Explore how Adobe Experience Manager and Workfront integrate to help teams move from ideation to delivery without the usual bottlenecks, ensuring content is organized, on-brand, and ready to go live faster.
RegisterAdobe Experience Manager Assets at Summit
Register for these user sessions:
- Put the Customer at the Center and Build Relationships That Last a Lifetime (attend online)
- A Proven Framework to Boost Campaign Creation Speed (attend online)
- Adobe’s Top 10 Generative AI Capabilities to Accelerate Your Content Supply Chain (attend online)
- Rapid Feature Releases with AEM Cloud: Telegraph Media Group’s RDE Strategy (attend online)
- Elevate and Empower Teams with Agentic AI for Exceptional Experiences (attend online)
Connect with Experience League at Summit!
Get front-row access to top sessions, hands-on activities, and networking—wherever you are!
Learn more