[
https://issues.apache.org/jira/browse/OFBIZ-13192?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jacques Le Roux updated OFBIZ-13192:
------------------------------------
Summary: Issues when uploading SVG files (was: HttpRequestFileUpload
includes "Content-Disposition" part and following)
> Issues when uploading SVG files
> -------------------------------
>
> Key: OFBIZ-13192
> URL: https://issues.apache.org/jira/browse/OFBIZ-13192
> Project: OFBiz
> Issue Type: Bug
> Components: ALL APPLICATIONS, ALL PLUGINS
> Reporter: Danny Trunk
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: 18.12.01
>
>
> There is something very annoying with SVG files, they almost all contain the
> word "class". Once you remove it from deniedWebShellTokens in
> security.properties those files pass and are uploaded w/o modification. I
> mean even its content, ie no Content-Disposition in it.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
