python-multipart 0.0.23__tar.gz → 0.0.24__tar.gz

{python_multipart-0.0.23 → python_multipart-0.0.24}/CHANGELOG.md

@@ -1,5 +1,9 @@
 # Changelog
 
+## 0.0.24 (2026-04-05)
+
+* Validate `chunk_size` in `parse_form()` [#244](https://github.com/Kludex/python-multipart/pull/244).
+
 ## 0.0.23 (2026-04-05)
 
 * Remove unused `trust_x_headers` parameter and `X-File-Name` fallback [#196](https://github.com/Kludex/python-multipart/pull/196).

{python_multipart-0.0.23 → python_multipart-0.0.24}/PKG-INFO

@@ -1,6 +1,6 @@
 Metadata-Version: 2.4
 Name: python-multipart
-Version: 0.0.23
+Version: 0.0.24
 Summary: A streaming multipart parser for Python
 Project-URL: Homepage, https://github.com/Kludex/python-multipart
 Project-URL: Documentation, https://kludex.github.io/python-multipart/

{python_multipart-0.0.23 → python_multipart-0.0.24}/pyproject.toml

@@ -55,6 +55,7 @@ dev = [
     "mkdocs-material",
     "mkdocstrings-python",
     "mkdocs-autorefs",
+    "pymdown-extensions>=10.21.2",
 ]
 
 [tool.uv.pip]

{python_multipart-0.0.23 → python_multipart-0.0.24}/python_multipart/__init__.py

@@ -1,4 +1,4 @@
-__version__ = "0.0.23"
+__version__ = "0.0.24"
 
 from .multipart import (
     BaseParser,

{python_multipart-0.0.23 → python_multipart-0.0.24}/python_multipart/multipart.py

@@ -1838,6 +1838,9 @@ def parse_form(
         chunk_size: The maximum size to read from the input stream and write to the parser at one time.
             Defaults to 1 MiB.
     """
+    if chunk_size < 1:
+        raise ValueError(f"chunk_size must be a positive number, not {chunk_size!r}")
+
     # Create our form parser.
     parser = create_form_parser(headers, on_field, on_file)
 

{python_multipart-0.0.23 → python_multipart-0.0.24}/tests/test_multipart.py

@@ -1413,6 +1413,16 @@ class TestHelperFunctions(unittest.TestCase):
         self.assertEqual(len(files), 1)
         self.assertEqual(files[0].size, 10)  # type: ignore[attr-defined]
 
+    def test_parse_form_invalid_chunk_size(self) -> None:
+        with self.assertRaisesRegex(ValueError, "chunk_size must be a positive number, not 0"):
+            parse_form(
+                {"Content-Type": b"application/octet-stream"},
+                BytesIO(b"123456789012345"),
+                lambda _: None,
+                lambda _: None,
+                chunk_size=0,
+            )
+
 
 def suite() -> unittest.TestSuite:
     suite = unittest.TestSuite()