Re: file upload name filtering

2025-02-10 Thread Lukasz Lenart
Hm... looks like I must re-think this approach, thanks all for reporting this issue! pon., 10 lut 2025 o 18:30 Burton Rhodes napisaƂ(a): > > The new default "EXCLUDED_FILE_PATTERN" is too restrictive for our > application. For example, we consider files with "&" valid. That said, > are we able t

Re: file upload name filtering

2025-02-10 Thread Burton Rhodes
The new default "EXCLUDED_FILE_PATTERN" is too restrictive for our application. For example, we consider files with "&" valid. That said, are we able to override the excluded file pattern in some way (e.g. struts properties)? private static final String EXCLUDED_FILE_PATTERN = "^(.*[<>&\"'|;

Upload Form field name [struts.token.name] is not accepted

2025-02-10 Thread Greg Huber
Testing, I also get this warning for an upload action, but not for normal actions. 2025-02-10 08:37:39,025 WARN org.apache.struts2.dispatcher.multipart.JakartaMultiPartRequest JakartaMultiPartRequest:processNormalFormField - Form field name [struts.token.name] is not accepted On 10/02/2025