Return-Path: Delivered-To: apmail-commons-commits-archive@minotaur.apache.org Received: (qmail 41583 invoked from network); 14 Jul 2010 20:03:14 -0000 Received: from unknown (HELO mail.apache.org) (140.211.11.3) by 140.211.11.9 with SMTP; 14 Jul 2010 20:03:14 -0000 Received: (qmail 56993 invoked by uid 500); 14 Jul 2010 20:03:14 -0000 Delivered-To: apmail-commons-commits-archive@commons.apache.org Received: (qmail 56897 invoked by uid 500); 14 Jul 2010 20:03:13 -0000 Mailing-List: contact commits-help@commons.apache.org; run by ezmlm Precedence: bulk List-Help: List-Unsubscribe: List-Post: List-Id: Reply-To: dev@commons.apache.org Delivered-To: mailing list commits@commons.apache.org Received: (qmail 56890 invoked by uid 99); 14 Jul 2010 20:03:13 -0000 Received: from nike.apache.org (HELO nike.apache.org) (192.87.106.230) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Jul 2010 20:03:13 +0000 X-ASF-Spam-Status: No, hits=-2000.0 required=10.0 tests=ALL_TRUSTED X-Spam-Check-By: apache.org Received: from [140.211.11.4] (HELO eris.apache.org) (140.211.11.4) by apache.org (qpsmtpd/0.29) with ESMTP; Wed, 14 Jul 2010 20:03:10 +0000 Received: by eris.apache.org (Postfix, from userid 65534) id 46E192388993; Wed, 14 Jul 2010 20:02:17 +0000 (UTC) Content-Type: text/plain; charset="utf-8" MIME-Version: 1.0 Content-Transfer-Encoding: 7bit Subject: svn commit: r964159 - in /commons/proper/fileupload/trunk: ./ src/changes/changes.xml Date: Wed, 14 Jul 2010 20:02:17 -0000 To: commits@commons.apache.org From: jochen@apache.org X-Mailer: svnmailer-1.0.8 Message-Id: <20100714200217.46E192388993@eris.apache.org> X-Virus-Checked: Checked by ClamAV on apache.org Author: jochen Date: Wed Jul 14 20:02:16 2010 New Revision: 964159 URL: http://svn.apache.org/viewvc?rev=964159&view=rev Log: Upgrade to latest parent POM, preparing 1.2.2. Modified: commons/proper/fileupload/trunk/ (props changed) commons/proper/fileupload/trunk/src/changes/changes.xml Propchange: commons/proper/fileupload/trunk/ ------------------------------------------------------------------------------ --- svn:ignore (original) +++ svn:ignore Wed Jul 14 20:02:16 2010 @@ -1,3 +1,5 @@ target maven.log velocity.log + +release.properties Modified: commons/proper/fileupload/trunk/src/changes/changes.xml URL: http://svn.apache.org/viewvc/commons/proper/fileupload/trunk/src/changes/changes.xml?rev=964159&r1=964158&r2=964159&view=diff ============================================================================== --- commons/proper/fileupload/trunk/src/changes/changes.xml (original) +++ commons/proper/fileupload/trunk/src/changes/changes.xml Wed Jul 14 20:02:16 2010 @@ -44,10 +44,11 @@ The type attribute can be add,u - Added a check for file names containing a NUL characters. - Such file names are now triggering an InvalidFileNameException, - due to a security problem. (A file name like "foo.exe\0.png" - might lead to the unintended creation of "foo.exe".) + Added a check for file names containing a NULL characters. Such file + names are now triggering an InvalidFileNameException since the file name + cannot be used as provided to create the file since it will be truncated + at the NUL character on most (all?) operating systems. E.g. a file name + like "test.foo0.bar" would result in "test.foo" being created.