You are viewing a plain text version of this content. The canonical link for it is here.
Posted to user@struts.apache.org by Greg Lindholm <gr...@gmail.com> on 2017/04/13 15:42:23 UTC
Disable file uploads
I have a Struts2 app that does not support any sort for file upload.
Is there any steps I could/should take to ensure file uploads are disabled?
Greg
Re: Disable file uploads
Posted by Lukasz Lenart <lu...@apache.org>.
2017-04-15 14:08 GMT+02:00 Jim Macalister <ji...@gmail.com>:
> is there a global setting that can be added to web.xml ? or to
> struts.properties ?
Nope, there is no such thing, but I can develop a NoOp multipart
parser and add it to struts-extras
> e.g. set a global non existing upload folder
> set max file size to 0 e.t.c.
Interesting ... but the validation happens when the request got already parsed
Regards
--
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: Disable file uploads
Posted by Jim Macalister <ji...@gmail.com>.
is there a global setting that can be added to web.xml ? or to
struts.properties ?
e.g. set a global non existing upload folder
set max file size to 0 e.t.c.
Regards
On Fri, Apr 14, 2017 at 8:33 AM, Lukasz Lenart <lu...@apache.org>
wrote:
> 2017-04-13 17:43 GMT+02:00 Adam Brin <ab...@digitalantiquity.org>:
> > One step is to modify the struts.xml to create a custom stack that
> doesn’t include the file-upload interceptor.
>
> Parsing of multipart request happens early, in Dispatcher so to be
> 100% sure you must implement a NoOpMultipartParser or define your own
> Dispatcher and override the wrapRequest() method or or the
> isMultipartRequest() method (new in 2.5.11)
>
>
> Regards
> --
> Łukasz
> + 48 606 323 122 http://www.lenart.org.pl/
>
> ---------------------------------------------------------------------
> To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
> For additional commands, e-mail: user-help@struts.apache.org
>
>
Re: Disable file uploads
Posted by Lukasz Lenart <lu...@apache.org>.
2017-04-13 17:43 GMT+02:00 Adam Brin <ab...@digitalantiquity.org>:
> One step is to modify the struts.xml to create a custom stack that doesn’t include the file-upload interceptor.
Parsing of multipart request happens early, in Dispatcher so to be
100% sure you must implement a NoOpMultipartParser or define your own
Dispatcher and override the wrapRequest() method or or the
isMultipartRequest() method (new in 2.5.11)
Regards
--
Łukasz
+ 48 606 323 122 http://www.lenart.org.pl/
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org
Re: Disable file uploads
Posted by Adam Brin <ab...@digitalantiquity.org>.
One step is to modify the struts.xml to create a custom stack that doesn’t include the file-upload interceptor.
--
_________________________________________________________
Adam Brin
Director of Technology, Digital Antiquity
480.965.1278
> On Apr 13, 2017, at 8:42 AM, Greg Lindholm <gr...@gmail.com> wrote:
>
> I have a Struts2 app that does not support any sort for file upload.
> Is there any steps I could/should take to ensure file uploads are disabled?
>
> Greg
---------------------------------------------------------------------
To unsubscribe, e-mail: user-unsubscribe@struts.apache.org
For additional commands, e-mail: user-help@struts.apache.org