[
https://issues.apache.org/jira/browse/OFBIZ-13192?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jacques Le Roux updated OFBIZ-13192:
------------------------------------
Description:
SVG files can only be uploaded when the "All" type is used. That's only done
inside the Content component. This component can also be used by other
component, like Party for instance.
There are something very annoying with SVG files.
When the All type is used and a SVG file is uploaded, the checking type order
places the CSV file before the SVG file type. In some case this error arises:
bq. java.io.IOException: (line 8) invalid char between encapsulated token and
delimiter
* Most often (always?) they are minified. Then, apart very small ones, they
contains long lines, at least longer than 10000 default.
They are they almost all contain the word "class". Once you remove it from
deniedWebShellTokens in security.properties those files pass and are uploaded
w/o modification.
Also
was:
There is something very annoying with SVG files, they almost all contain the
word "class". Once you remove it from deniedWebShellTokens in
security.properties those files pass and are uploaded w/o modification. I mean
even its content, ie no Content-Disposition in it.
> Issues when uploading SVG files
> -------------------------------
>
> Key: OFBIZ-13192
> URL: https://issues.apache.org/jira/browse/OFBIZ-13192
> Project: OFBiz
> Issue Type: Bug
> Components: ALL APPLICATIONS, ALL PLUGINS
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: 18.12.01
>
>
> SVG files can only be uploaded when the "All" type is used. That's only done
> inside the Content component. This component can also be used by other
> component, like Party for instance.
> There are something very annoying with SVG files.
> When the All type is used and a SVG file is uploaded, the checking type order
> places the CSV file before the SVG file type. In some case this error arises:
> bq. java.io.IOException: (line 8) invalid char between encapsulated token and
> delimiter
> * Most often (always?) they are minified. Then, apart very small ones, they
> contains long lines, at least longer than 10000 default.
> They are they almost all contain the word "class". Once you remove it from
> deniedWebShellTokens in security.properties those files pass and are uploaded
> w/o modification.
> Also
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
