[ 
https://issues.apache.org/jira/browse/WW-3025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=13053124#comment-13053124
 ] 

Maurizio Cucchiara edited comment on WW-3025 at 6/22/11 8:38 AM:
-----------------------------------------------------------------

Hi Jagob,
you're right but what you suggested it's a workaround.
I'm going to follow Lukasz's advice, posting first a question to the commons ML.
Before that I would like to write a simple struts, non-dependant, test.

      was (Author: maurizio.cucchiara):
    Hi Jagob,
you're right but what you suggested it's a workaround.
Lukasz
  
> Parameters get lost when file upload over max size allowed
> ----------------------------------------------------------
>
>                 Key: WW-3025
>                 URL: https://issues.apache.org/jira/browse/WW-3025
>             Project: Struts 2
>          Issue Type: Improvement
>          Components: Core Interceptors
>    Affects Versions: 2.1.6
>         Environment: All
>            Reporter: Tom Nguyen
>             Fix For: 2.2.x, 2.3
>
>
> When the uploaded file gets rejected because it's content, size, or because 
> of a general problem an Exception is thrown by the MultiPartRequest class. 
> Exceptions are: InvalidContentTypeException, UnknownSizeException, 
> SizeLimitExceededException, and FileUploadException. This can lead to serious 
> problems within the application because the other parameters from the upload 
> form get lost. Happening in a profile page for example means that the user 
> data is lost this can lead to a security Exception. In other case this 
> usually just involves a OGNL-Exception. Meaning your field data like personal 
> file name is lost. Workaround found in 
> http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/,
>  but the the still keep uploading to server, not secured.

--
This message is automatically generated by JIRA.
For more information on JIRA, see: http://www.atlassian.com/software/jira

        

Reply via email to