Struts 2
  1. Struts 2
  2. WW-3025

Parameters get lost when file upload over max size allowed

    Details

    • Type: Improvement Improvement
    • Status: Open
    • Priority: Major Major
    • Resolution: Unresolved
    • Affects Version/s: 2.1.6
    • Fix Version/s: 2.3.18
    • Component/s: Core Interceptors
    • Labels:
      None
    • Environment:

      All

    • Flags:
      Important

      Description

      When the uploaded file gets rejected because it's content, size, or because of a general problem an Exception is thrown by the MultiPartRequest class. Exceptions are: InvalidContentTypeException, UnknownSizeException, SizeLimitExceededException, and FileUploadException. This can lead to serious problems within the application because the other parameters from the upload form get lost. Happening in a profile page for example means that the user data is lost this can lead to a security Exception. In other case this usually just involves a OGNL-Exception. Meaning your field data like personal file name is lost. Workaround found in http://henning.kropponline.de/index.php/2009/01/18/struts2-fileuploadbase-exception/, but the the still keep uploading to server, not secured.

        Issue Links

          Activity

          Tom Nguyen created issue -
          Wes Wannemacher made changes -
          Field Original Value New Value
          Fix Version/s 2.2.x [ 21892 ]
          Issue Type Bug [ 1 ] Improvement [ 4 ]
          Jeff Turner made changes -
          Project Import Mon Feb 01 01:17:42 UTC 2010 [ 1264987062082 ]
          Lukasz Lenart made changes -
          Fix Version/s 2.3 [ 12315916 ]
          Maurizio Cucchiara made changes -
          Link This issue depends on FILEUPLOAD-194 [ FILEUPLOAD-194 ]
          Maurizio Cucchiara made changes -
          Link This issue is cloned as WW-3665 [ WW-3665 ]
          Lukasz Lenart made changes -
          Fix Version/s 2.2.x [ 12314679 ]
          Lukasz Lenart made changes -
          Fix Version/s Future [ 12314681 ]
          Fix Version/s 2.3.1 [ 12315916 ]
          Gavin made changes -
          Link This issue depends on FILEUPLOAD-194 [ FILEUPLOAD-194 ]
          Gavin made changes -
          Link This issue depends upon FILEUPLOAD-194 [ FILEUPLOAD-194 ]
          Chris Cranford made changes -
          Attachment JakartaStreamMultiPartRequest.java [ 12613168 ]
          Lukasz Lenart made changes -
          Fix Version/s 2.3.17 [ 12324780 ]
          Fix Version/s Future [ 12314681 ]
          Lukasz Lenart made changes -
          Fix Version/s 2.3.x [ 12319176 ]
          Fix Version/s 2.3.17 [ 12324780 ]

            People

            • Assignee:
              Unassigned
              Reporter:
              Tom Nguyen
            • Votes:
              6 Vote for this issue
              Watchers:
              10 Start watching this issue

              Dates

              • Created:
                Updated:

                Development