struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Lukasz Lenart (JIRA)" <j...@apache.org>
Subject [jira] [Resolved] (WW-3025) Parameters get lost when file upload over max size allowed
Date Sun, 20 Jul 2014 09:09:38 GMT

     [ https://issues.apache.org/jira/browse/WW-3025?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]

Lukasz Lenart resolved WW-3025.
-------------------------------

    Resolution: Fixed
      Assignee: Lukasz Lenart

I added your MultiPart parser to Struts core libs, docs updated as well
https://cwiki.apache.org/confluence/display/WW/File+Upload#FileUpload-AlternateLibraries

Thanks [~crancran]!

> Parameters get lost when file upload over max size allowed
> ----------------------------------------------------------
>
>                 Key: WW-3025
>                 URL: https://issues.apache.org/jira/browse/WW-3025
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core Interceptors
>    Affects Versions: 2.1.6
>         Environment: All
>            Reporter: Tom Nguyen
>            Assignee: Lukasz Lenart
>             Fix For: 2.3.18
>
>         Attachments: JakartaStreamMultiPartRequest.java
>
>
> When the uploaded file gets rejected because it's content, size, or because of a general
problem an Exception is thrown by the MultiPartRequest class. Exceptions are: InvalidContentTypeException,
UnknownSizeException, SizeLimitExceededException, and FileUploadException. This can lead to
serious problems within the application because the other parameters from the upload form
get lost. Happening in a profile page for example means that the user data is lost this can
lead to a security Exception. In other case this usually just involves a OGNL-Exception. Meaning
your field data like personal file name is lost. Workaround found in http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/,
but the the still keep uploading to server, not secured.



--
This message was sent by Atlassian JIRA
(v6.2#6252)

Mime
View raw message