Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Multipart form filename fix - IllegalArgumentException: File path not allowed #203

Closed
wants to merge 1 commit into from

Conversation

tjordahl
Copy link
Contributor

Do not call SecurityUtils.getValidFilePath when processing a Multipart form as it will reject almost anything a user might put there. Just use the base filename

…t form as it will reject almost anything a user might put there. Just use the base filename
@tjordahl tjordahl closed this Oct 24, 2018
@sapessi
Copy link
Collaborator

sapessi commented Oct 24, 2018

Why did you close it @tjordahl?

@tjordahl
Copy link
Contributor Author

Sorry, didn't quite get it merged in to my fork master (which I suppose wasn't a requirement really)
See #205 For the real fix.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants