struts-issues mailing list archives

Site index · List index
Message view « Date » · « Thread »
Top « Date » · « Thread »
From "Hudson (JIRA)" <>
Subject [jira] [Commented] (WW-3025) Parameters get lost when file upload over max size allowed
Date Sun, 20 Jul 2014 09:30:38 GMT


Hudson commented on WW-3025:

SUCCESS: Integrated in Struts-JDK6-develop #65 (See [])
WW-3025 Adds new JakartaStream multipart request handler (lukaszlenart: rev e7a414fea354ccf6694f3d101d53f5ff311c69d2)
* core/src/main/resources/org/apache/struts2/
* core/src/main/java/org/apache/struts2/dispatcher/multipart/
* core/src/main/resources/struts-default.xml
* core/src/main/java/org/apache/struts2/

> Parameters get lost when file upload over max size allowed
> ----------------------------------------------------------
>                 Key: WW-3025
>                 URL:
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core Interceptors
>    Affects Versions: 2.1.6
>         Environment: All
>            Reporter: Tom Nguyen
>            Assignee: Lukasz Lenart
>             Fix For: 2.3.18
>         Attachments:
> When the uploaded file gets rejected because it's content, size, or because of a general
problem an Exception is thrown by the MultiPartRequest class. Exceptions are: InvalidContentTypeException,
UnknownSizeException, SizeLimitExceededException, and FileUploadException. This can lead to
serious problems within the application because the other parameters from the upload form
get lost. Happening in a profile page for example means that the user data is lost this can
lead to a security Exception. In other case this usually just involves a OGNL-Exception. Meaning
your field data like personal file name is lost. Workaround found in,
but the the still keep uploading to server, not secured.

This message was sent by Atlassian JIRA

View raw message