[
https://issues.apache.org/jira/browse/OFBIZ-13192?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Jacques Le Roux updated OFBIZ-13192:
------------------------------------
Description:
SVG files can only be uploaded when the "All" type is used. That's only done
inside the Content component. This component can also be used by other
component, like Party for instance.
There are some issues when uploading SVG files.
* When the All type is used and a SVG file is uploaded, the checking type order
places the CSV file before the SVG file type. In some cases this error arises:
bq. java.io.IOException: (line 8) invalid char between encapsulated token and
delimiter
* Most often (always?) they are minified. Then, apart very small ones, they
contains long lines, at least longer than 10000 default.
* They almost all contain the word "class". Once you remove it from
deniedWebShellTokens in security.properties the files pass and are uploaded w/o
modification.
was:
SVG files can only be uploaded when the "All" type is used. That's only done
inside the Content component. This component can also be used by other
component, like Party for instance.
There are some issues when uploading SVG files.
* When the All type is used and a SVG file is uploaded, the checking type order
places the CSV file before the SVG file type. In some case this error arises:
bq. java.io.IOException: (line 8) invalid char between encapsulated token and
delimiter
* Most often (always?) they are minified. Then, apart very small ones, they
contains long lines, at least longer than 10000 default.
* They almost all contain the word "class". Once you remove it from
deniedWebShellTokens in security.properties the files pass and are uploaded w/o
modification.
> Issues when uploading SVG files
> -------------------------------
>
> Key: OFBIZ-13192
> URL: https://issues.apache.org/jira/browse/OFBIZ-13192
> Project: OFBiz
> Issue Type: Bug
> Components: content, party
> Affects Versions: 18.12.17, 24.09.01
> Reporter: Jacques Le Roux
> Assignee: Jacques Le Roux
> Priority: Major
> Fix For: 24.09.01, 18.12.18
>
>
> SVG files can only be uploaded when the "All" type is used. That's only done
> inside the Content component. This component can also be used by other
> component, like Party for instance.
> There are some issues when uploading SVG files.
> * When the All type is used and a SVG file is uploaded, the checking type
> order places the CSV file before the SVG file type. In some cases this error
> arises:
> bq. java.io.IOException: (line 8) invalid char between encapsulated token and
> delimiter
> * Most often (always?) they are minified. Then, apart very small ones, they
> contains long lines, at least longer than 10000 default.
> * They almost all contain the word "class". Once you remove it from
> deniedWebShellTokens in security.properties the files pass and are uploaded
> w/o modification.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
