[ https://issues.apache.org/jira/browse/WW-5371?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17846624#comment-17846624 ]
Adam Vento commented on WW-5371: -------------------------------- When uploading multiple files to multiple input fields with different names is there a way to know which fields which file was uploaded to using the new interface {{UploadedFilesAware}}? At least reading through the source I didn't find an obvious way and with WW-5386 in sight I'm concerned if this would a blocker for us. > Use action based callback to transfer information about uploaded files > ---------------------------------------------------------------------- > > Key: WW-5371 > URL: https://issues.apache.org/jira/browse/WW-5371 > Project: Struts 2 > Issue Type: Improvement > Components: Core Interceptors > Reporter: Lukasz Lenart > Assignee: Lukasz Lenart > Priority: Major > Fix For: 6.4.0 > > Time Spent: 2h > Remaining Estimate: 0h > > Based on experience of the latest security vulnerability (CVE-2023-50164) it > would be better to keep uploaded files out of scope of passed parameters. > The idea is to have a dedicated interceptor and *Aware interface instead of > using parameter injection as it happens currently. -- This message was sent by Atlassian Jira (v8.20.10#820010)