Enable asset download servlet

The default servlet in Experience Manager allows authenticated users to issue arbitrarily large, concurrent download requests for creating ZIP files of assets visible to them that can overload the server and the network. To mitigate potential DoS risks caused by this feature, AssetDownloadServlet OSGi component is disabled by default for publish instances.

To allow downloading assets from your DAM, say when using something like Asset Share Commons or other portal-like implementation, manually enable the servlet via an OSGi configuration. Adobe recommends setting the permissible download size as low as possible without affecting the day-to-day download requirements. A high value may impact performance.

  1. Create a folder with a naming convention that targets the publish runmode (config.publish): /apps/<your-app-name>/config.publish. To define configuration properties for a run mode, see Run Modes.

  2. In the configuration folder, create a file of type nt:file named com.day.cq.dam.core.impl.servlet.AssetDownloadServlet.config.

  3. Populate com.day.cq.dam.core.impl.servlet.AssetDownloadServlet.config with the following. Sets a maximum size (in bytes) for the download as value of asset.download.prezip.maxcontentsize. The below sample configures the maximum size of the ZIP download to not exceed 100 kB.

    enabled=B"true"
    asset.download.prezip.maxcontentsize=I"102400"
    

Experience Manager


The Perfect Blend: A New Era of Collaboration with AEM and Workfront

Adobe Customer Success Webinars

Wednesday, Apr 2, 5:00 PM UTC

Explore how Adobe Experience Manager and Workfront integrate to help teams move from ideation to delivery without the usual bottlenecks, ensuring content is organized, on-brand, and ready to go live faster.

Register

Connect with Experience League at Summit!

Get front-row access to top sessions, hands-on activities, and networking—wherever you are!

Learn more