Mailing-List: contact dev-help@chemistry.apache.org; run by ezmlm
Precedence: bulk
Reply-To: dev@chemistry.apache.org
Date: Mon, 17 Oct 2016 03:41:58 +0000 (UTC)
From: "Ron Gavlin (JIRA)" <jira@apache.org>
To: dev@chemistry.apache.org
Message-ID: <JIRA.13012679.1476617723000.793.1476675718492@Atlassian.JIRA>
In-Reply-To: <JIRA.13012679.1476617723000@Atlassian.JIRA>
References: <JIRA.13012679.1476617723000@Atlassian.JIRA> <JIRA.13012679.1476617723156@arcas>
Subject: [jira] [Comment Edited] (CMIS-1001) Parse Content-MD5 Mime Header
 and use it for validation if present
MIME-Version: 1.0
Content-Type: text/plain; charset=utf-8
Content-Transfer-Encoding: 7bit
archived-at: Mon, 17 Oct 2016 03:42:00 -0000


    [ https://issues.apache.org/jira/browse/CMIS-1001?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=15581098#comment-15581098 ] 

Ron Gavlin edited comment on CMIS-1001 at 10/17/16 3:41 AM:
------------------------------------------------------------

The proposed patch for the Browser Binding is available as PR: https://github.com/apache/chemistry-opencmis/pull/9.

Please review and provide feedback.

Thanks,

Ron


was (Author: rgavlin):
The proposed patch is available as PR: https://github.com/apache/chemistry-opencmis/pull/9.

Please review and provide feedback. 

Thanks,

Ron

> Parse Content-MD5 Mime Header and use it for validation if present
> ------------------------------------------------------------------
>
>                 Key: CMIS-1001
>                 URL: https://issues.apache.org/jira/browse/CMIS-1001
>             Project: Chemistry
>          Issue Type: Improvement
>          Components: opencmis-server
>    Affects Versions: OpenCMIS 1.0.0
>            Reporter: Ron Gavlin
>            Priority: Minor
>
> Sometimes content streams get corrupted over the wire. Content stream hashes are often used to protect against these corruptions.
> Apache Chemistry OpenCMIS should validate contentStream input to AtomPub and Browser Binding CMIS operations, including setContentStream, appendContentStream, checkIn, and createDocument, by comparing the content stream MD5 hash against a Content-MD5 MIME header if present. A CMIS invalidArgument exception should be thrown if the hashes are not equal.


--
This message was sent by Atlassian JIRA
(v6.3.4#6332)