file upload name filtering

Greg Huber <[email protected]> Fri, 7 Feb 2025 12:02:36 +0000
Newsgroups gmane.comp.jakarta.struts.devel
Message-ID <[email protected]>
What is this actually escaping?  Stuff that can mess with the system?

Not had any uploads bounce so far.

On 05/02/2025 04:20, Kusal Kithul-Godage wrote:
> I've just tested this with the Confluence Data Center application.
>
> The file name filtering is actually causing a user experience regression for us.
>
> Previously, we were able to validate the filename manually and display
> the user an error - "Unsupported characters in file name". Now that
> the file is discarded immediately, it shows the user an "Upload not
> found" error which is not accurate.
>
> I think the new validation should also add a LocalizedMessage that can
> be retrieved by MultiPartRequest#getErrors like we have for other
> validations. What do you think?
>
> On Tue, Feb 4, 2025 at 5:59 PM Lukasz Lenart<[email protected]> wrote:
>> Hello,
>>
>> This is a patch release of Struts 6.x.x which contains only
>> non-breaking changes. Please take the time and test the bits - any
>> help is appreciated. Please report any problems you will spot.
>>
>> Here are the changes from the previous version:
>> https://github.com/apache/struts/releases/tag/STRUTS_6_7_2
>>
>> Staging Maven repo
>> https://repository.apache.org/content/groups/staging/
>>
>> Standalone artifacts
>> https://dist.apache.org/repos/dist/dev/struts/6.7.2/
>>
>> Release notes
>> https://cwiki.apache.org/confluence/display/WW/Version+Notes+6.7.2
>>
>>
>> Kind regards
>> --
>> Łukasz
>>
>> ---------------------------------------------------------------------
>> To unsubscribe, e-mail:[email protected]
>> For additional commands, e-mail:[email protected]
>>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail:[email protected]
> For additional commands, e-mail:[email protected]
>