[
https://issues.apache.org/jira/browse/METRON-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel
]
Otto Fowler updated METRON-2350:
--------------------------------
Description:
HandleHttpParameters writes attributes for get return from
HttpServletRequest.getParameters().
getParameters() is defined as returning a value for each query part OR form
data value.
As such, large bits of data, send as part of multipart/form data will end up in
the attributes, which is not what we want.
The processor also does not document writing this attribute.
The processor should NOT write parameter values for parameters that are part of
the form data if possible.
an example from log attributes:
{noformat}
Key: 'http.multipart.content.type'
Value: 'text/plain'
Key: 'http.multipart.fragments.sequence.number'
Value: '1'
Key: 'http.multipart.fragments.total.number'
Value: '3'
Key: 'http.multipart.name'
Value: 'upload-data'
Key: 'http.multipart.size'
Value: '18'
Key: 'http.param.DataTwo'
Value: 'DATA TWO!!!!'
Key: 'http.param.data1'
Value: 'DATA ONE!!!'
Key: 'http.param.upload-data'
Value: 'Flowfile content!!'
{noformat}
was:
HandleHttpParameters writes attributes for get return from
HttpServletRequest.getParameters().
getParameters() is defined as returning a value for each query part OR form
data value.
As such, large bits of data, send as part of multipart/form data will end up in
the attributes, which is not what we want.
The processor also does not document writing this attribute.
The processor should NOT write parameter values for parameters that are part of
the form data if possible.
> HandleHttpRequest puts form data content into attributes
> --------------------------------------------------------
>
> Key: METRON-2350
> URL: https://issues.apache.org/jira/browse/METRON-2350
> Project: Metron
> Issue Type: Bug
> Reporter: Otto Fowler
> Assignee: Otto Fowler
> Priority: Major
>
> HandleHttpParameters writes attributes for get return from
> HttpServletRequest.getParameters().
> getParameters() is defined as returning a value for each query part OR form
> data value.
> As such, large bits of data, send as part of multipart/form data will end up
> in the attributes, which is not what we want.
> The processor also does not document writing this attribute.
> The processor should NOT write parameter values for parameters that are part
> of the form data if possible.
> an example from log attributes:
> {noformat}
> Key: 'http.multipart.content.type'
> Value: 'text/plain'
> Key: 'http.multipart.fragments.sequence.number'
> Value: '1'
> Key: 'http.multipart.fragments.total.number'
> Value: '3'
> Key: 'http.multipart.name'
> Value: 'upload-data'
> Key: 'http.multipart.size'
> Value: '18'
> Key: 'http.param.DataTwo'
> Value: 'DATA TWO!!!!'
> Key: 'http.param.data1'
> Value: 'DATA ONE!!!'
> Key: 'http.param.upload-data'
> Value: 'Flowfile content!!'
> {noformat}
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
