[
https://issues.apache.org/jira/browse/WW-5176?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Sergey Zolotarev updated WW-5176:
---------------------------------
Description:
The regex used inside isMultipartRequest() in Dispatcher.java expects the
charset directive to be in the middle between the media type and boundary, but
there are third-party libraries that append it after "bounary", which seems
legitimate to me.
i.e. this works:
{code:java}
Content-Type: multipart/form-data; bounary=123467890; charset=utf-8{code}
this doesn't work:
{code:java}
Content-Type: multipart/form-data; charset=utf-8; bounary=123467890{code}
was:
The regex used inside isMultipartRequest() in Dispatcher.java expects the
charset directive to be in the middle between the media type and boundary, but
there are libraries that append it after "bounary", which seems legitimate to
me.
i.e. this works:
{code:java}
Content-Type: multipart/form-data; bounary=123467890; charset=utf-8{code}
this doesn't work:
{code:java}
Content-Type: multipart/form-data; charset=utf-8; bounary=123467890{code}
> multipart/form-data parameters are not processed when charset is placed
> before boundary in Content-Type header
> --------------------------------------------------------------------------------------------------------------
>
> Key: WW-5176
> URL: https://issues.apache.org/jira/browse/WW-5176
> Project: Struts 2
> Issue Type: Bug
> Components: Dispatch Filter
> Affects Versions: 2.5.29
> Reporter: Sergey Zolotarev
> Priority: Major
>
> The regex used inside isMultipartRequest() in Dispatcher.java expects the
> charset directive to be in the middle between the media type and boundary,
> but there are third-party libraries that append it after "bounary", which
> seems legitimate to me.
> i.e. this works:
>
> {code:java}
> Content-Type: multipart/form-data; bounary=123467890; charset=utf-8{code}
>
> this doesn't work:
>
> {code:java}
> Content-Type: multipart/form-data; charset=utf-8; bounary=123467890{code}
>
>
>
>
--
This message was sent by Atlassian Jira
(v8.20.1#820001)
