struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Tom Nguyen (JIRA)" <j...@apache.org>
Subject [jira] Created: (WW-3025) Parameters get lost when file upload over max size allowed
Date Sun, 08 Mar 2009 01:56:02 GMT
Parameters get lost when file upload over max size allowed
----------------------------------------------------------

                 Key: WW-3025
                 URL: https://issues.apache.org/struts/browse/WW-3025
             Project: Struts 2
          Issue Type: Bug
          Components: Core Interceptors
    Affects Versions: 2.1.6
         Environment: All
            Reporter: Tom Nguyen


When the uploaded file gets rejected because it's content, size, or because of a general problem
an Exception is thrown by the MultiPartRequest class. Exceptions are: InvalidContentTypeException,
UnknownSizeException, SizeLimitExceededException, and FileUploadException. This can lead to
serious problems within the application because the other parameters from the upload form
get lost. Happening in a profile page for example means that the user data is lost this can
lead to a security Exception. In other case this usually just involves a OGNL-Exception. Meaning
your field data like personal file name is lost. Workaround found in http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/,
but the the still keep uploading to server, not secured.

-- 
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.


Mime
View raw message