[
https://issues.apache.org/jira/browse/WW-3025?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=14067868#comment-14067868
]
Hudson commented on WW-3025:
----------------------------
SUCCESS: Integrated in Struts-JDK6-develop #65 (See
[https://builds.apache.org/job/Struts-JDK6-develop/65/])
WW-3025 Adds new JakartaStream multipart request handler (lukaszlenart: rev
e7a414fea354ccf6694f3d101d53f5ff311c69d2)
* core/src/main/resources/org/apache/struts2/default.properties
*
core/src/main/java/org/apache/struts2/dispatcher/multipart/JakartaStreamMultiPartRequest.java
* core/src/main/resources/struts-default.xml
* core/src/main/java/org/apache/struts2/StrutsConstants.java
> Parameters get lost when file upload over max size allowed
> ----------------------------------------------------------
>
> Key: WW-3025
> URL: https://issues.apache.org/jira/browse/WW-3025
> Project: Struts 2
> Issue Type: Improvement
> Components: Core Interceptors
> Affects Versions: 2.1.6
> Environment: All
> Reporter: Tom Nguyen
> Assignee: Lukasz Lenart
> Fix For: 2.3.18
>
> Attachments: JakartaStreamMultiPartRequest.java
>
>
> When the uploaded file gets rejected because it's content, size, or because
> of a general problem an Exception is thrown by the MultiPartRequest class.
> Exceptions are: InvalidContentTypeException, UnknownSizeException,
> SizeLimitExceededException, and FileUploadException. This can lead to serious
> problems within the application because the other parameters from the upload
> form get lost. Happening in a profile page for example means that the user
> data is lost this can lead to a security Exception. In other case this
> usually just involves a OGNL-Exception. Meaning your field data like personal
> file name is lost. Workaround found in
> http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/,
> but the the still keep uploading to server, not secured.
--
This message was sent by Atlassian JIRA
(v6.2#6252)
