Parameters get lost when file upload over max size allowed
----------------------------------------------------------
Key: WW-3025
URL: https://issues.apache.org/struts/browse/WW-3025
Project: Struts 2
Issue Type: Bug
Components: Core Interceptors
Affects Versions: 2.1.6
Environment: All
Reporter: Tom Nguyen
When the uploaded file gets rejected because it's content, size, or because of
a general problem an Exception is thrown by the MultiPartRequest class.
Exceptions are: InvalidContentTypeException, UnknownSizeException,
SizeLimitExceededException, and FileUploadException. This can lead to serious
problems within the application because the other parameters from the upload
form get lost. Happening in a profile page for example means that the user data
is lost this can lead to a security Exception. In other case this usually just
involves a OGNL-Exception. Meaning your field data like personal file name is
lost. Workaround found in
http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/,
but the the still keep uploading to server, not secured.
--
This message is automatically generated by JIRA.
-
You can reply to this email to add a comment to the issue online.
