[WW-3025] Parameters get lost when file upload over max size allowed

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.1.6
• Fix Version/s: 2.3.20
• Component/s: Core Interceptors

Environment

All

• Flags: Important
• Assignee: Lukasz Lenart
• Reporter: Tom Nguyen
• Created: 08/Mar/09 01:55
• Updated: 17/Sep/15 09:52
• Resolved: 20/Jul/14 09:09

Description

When the uploaded file gets rejected because it's content, size, or because of a general problem an Exception is thrown by the MultiPartRequest class. Exceptions are: InvalidContentTypeException, UnknownSizeException, SizeLimitExceededException, and FileUploadException. This can lead to serious problems within the application because the other parameters from the upload form get lost. Happening in a profile page for example means that the user data is lost this can lead to a security Exception. In other case this usually just involves a OGNL-Exception. Meaning your field data like personal file name is lost. Workaround found in http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/, but the the still keep uploading to server, not secured.

Issue Links

• depends upon: FILEUPLOAD-194 conceptual error throwing FileUploadException when upload size or file size exeeds limits
• is cloned by: WW-3665 Exceeding struts.multipart.maxSize empties form fields