[ https://issues.apache.org/jira/browse/WW-4958?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Tamás Faragó updated WW-4958: ----------------------------- Description: 2.5.11 added more validation on whether to accept file uploads. Previously there was only a check if the HTTP header contained "multiparty/form-data", now there is the following regex in isMultiPartRequest(). {{public static final String MULTIPART_FORM_DATA_REGEX = "^multipart/form-data(; boundary=[0-9a-zA-Z'()+_,\\-./:=?]{1,70})?(;charset=[a-zA-Z\\-0-9]{3,14})?";}} This is too restrictive, apache http client for example adds a white space between the semicolon and "charset" and thus all file uploads are failing unless this regex is overwritten in the config. was: 2.5.11 added more validation on whether to accept file uploads. Previously there was only a check if the HTTP header contained "form/multi-part", now there is the following regex in isMultiPartRequest(). {{public static final String MULTIPART_FORM_DATA_REGEX = "^multipart/form-data(; boundary=[0-9a-zA-Z'()+_,\\-./:=?]\{1,70})?(;charset=[a-zA-Z\\-0-9]\{3,14})?"; }} This is too restrictive, apache http client for example adds a white space between the semicolon and "charset" and thus all file uploads are failing unless this regex is overwritten in the config. > File upload fails from certain clients > -------------------------------------- > > Key: WW-4958 > URL: https://issues.apache.org/jira/browse/WW-4958 > Project: Struts 2 > Issue Type: Bug > Components: Dispatch Filter > Affects Versions: 2.5.17 > Reporter: Tamás Faragó > Priority: Major > > 2.5.11 added more validation on whether to accept file uploads. Previously > there was only a check if the HTTP header contained "multiparty/form-data", > now there is the following regex in isMultiPartRequest(). > {{public static final String MULTIPART_FORM_DATA_REGEX = > "^multipart/form-data(; > boundary=[0-9a-zA-Z'()+_,\\-./:=?]{1,70})?(;charset=[a-zA-Z\\-0-9]{3,14})?";}} > This is too restrictive, apache http client for example adds a white space > between the semicolon and "charset" and thus all file uploads are failing > unless this regex is overwritten in the config. -- This message was sent by Atlassian JIRA (v7.6.3#76005)