[prev in list] [next in list] [prev in thread] [next in thread] 

List:       struts-dev
Subject:    [jira] [Updated] (WW-3025) Parameters get lost when file upload
From:       "Lukasz Lenart (JIRA)" <jira () apache ! org>
Date:       2011-03-28 6:06:05
Message-ID: 455634234.16054.1301292365942.JavaMail.tomcat () hel ! zones ! apache ! org
[Download RAW message or body]


     [ https://issues.apache.org/jira/browse/WW-3025?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel \
]

Lukasz Lenart updated WW-3025:
------------------------------

    Fix Version/s: 2.3

> Parameters get lost when file upload over max size allowed
> ----------------------------------------------------------
> 
> Key: WW-3025
> URL: https://issues.apache.org/jira/browse/WW-3025
> Project: Struts 2
> Issue Type: Improvement
> Components: Core Interceptors
> Affects Versions: 2.1.6
> Environment: All
> Reporter: Tom Nguyen
> Fix For: 2.2.x, 2.3
> 
> 
> When the uploaded file gets rejected because it's content, size, or because of a \
> general problem an Exception is thrown by the MultiPartRequest class. Exceptions \
> are: InvalidContentTypeException, UnknownSizeException, SizeLimitExceededException, \
> and FileUploadException. This can lead to serious problems within the application \
> because the other parameters from the upload form get lost. Happening in a profile \
> page for example means that the user data is lost this can lead to a security \
> Exception. In other case this usually just involves a OGNL-Exception. Meaning your \
> field data like personal file name is lost. Workaround found in \
> http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/, \
> but the the still keep uploading to server, not secured.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira


[prev in list] [next in list] [prev in thread] [next in thread]