[tika] branch main updated: TIKA-3864 - url decode fetchkey when sent in via a header -- backdoor for legacy behavior.

[tallison]

This is an automated email from the ASF dual-hosted git repository.

tallison pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tika.git


The following commit(s) were added to refs/heads/main by this push:
     new 3dfd7f723 TIKA-3864 - url decode fetchkey when sent in via a header -- 
backdoor for legacy behavior.
3dfd7f723 is described below

commit 3dfd7f72388ae8ca950e6b37bc1e09146c663717
Author: tallison <talli...@apache.org>
AuthorDate: Tue Oct 4 18:06:23 2022 -0400

    TIKA-3864 - url decode fetchkey when sent in via a header -- backdoor for 
legacy behavior.
---
 .../main/java/org/apache/tika/server/core/FetcherStreamFactory.java    | 3 +++
 1 file changed, 3 insertions(+)

diff --git 
a/tika-server/tika-server-core/src/main/java/org/apache/tika/server/core/FetcherStreamFactory.java
 
b/tika-server/tika-server-core/src/main/java/org/apache/tika/server/core/FetcherStreamFactory.java
index 8eeec1162..eb9188f51 100644
--- 
a/tika-server/tika-server-core/src/main/java/org/apache/tika/server/core/FetcherStreamFactory.java
+++ 
b/tika-server/tika-server-core/src/main/java/org/apache/tika/server/core/FetcherStreamFactory.java
@@ -69,6 +69,9 @@ public class FetcherStreamFactory implements 
InputStreamFactory {
         String fetcherName = getParam("fetcherName", httpHeaders, params);
         String fetchKey = getParam("fetchKey", httpHeaders, params);
         fetchKey = urlDecode(fetchKey);
+        if (StringUtils.isBlank(fetchKey)) {
+            fetchKey = getParam("fetchKeyLiteral", httpHeaders, params);
+        }
 
         long fetchRangeStart = getLong(getParam("fetchRangeStart", 
httpHeaders, params));
         long fetchRangeEnd = getLong(getParam("fetchRangeEnd", httpHeaders, 
params));