Uploaded image for project: 'CXF'
  1. CXF
  2. CXF-8353

MediaTypeHeaderProvider not handling all invalid media types

Attach filesAttach ScreenshotAdd voteVotersWatch issueWatchersCreate sub-taskLinkCloneUpdate Comment AuthorReplace String in CommentUpdate Comment VisibilityDelete Comments
    XMLWordPrintableJSON

    Details

    • Type: Bug
    • Status: Open
    • Priority: Minor
    • Resolution: Unresolved
    • Affects Version/s: 3.4.0
    • Fix Version/s: None
    • Component/s: JAX-RS
    • Labels:
      None
    • Estimated Complexity:
      Unknown

      Description

      According to https://tools.ietf.org/html/rfc2045#section-5.1 there are a lot of characters that are not allowed in the type or subtype fields of a MIME /MediaType. Currently, CXF only checks for '/' in the subtype.

      Instead it should be checking for:
      tspecials := "(" / ")" / "<" / ">" / "@" /
      "," / ";" / ":" / "\" / <">
      "/" / "[" / "]" / "?" / "="
      ; Must be in quoted-string,
      ; to use within parameter values

        Attachments

          Activity

            People

            • Assignee:
              amccright Andy McCright
              Reporter:
              amccright Andy McCright

              Dates

              • Created:
                Updated:

                Issue deployment