You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Pierre Smits (Jira)" <ji...@apache.org> on 2024/03/12 07:34:00 UTC

[jira] [Commented] (OFBIZ-12937) Prevent possible file race conditions with SecuredUpload class

    [ https://issues.apache.org/jira/browse/OFBIZ-12937?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17825546#comment-17825546 ] 

Pierre Smits commented on OFBIZ-12937:
--------------------------------------

Hi [~jleroux] 

IMO, these same issues in ImageManagementServices and ProductServices should not exist, but the functions/servics there should call the functions in DataServices in the framework stack.

> Prevent possible file race conditions with SecuredUpload class
> --------------------------------------------------------------
>
>                 Key: OFBIZ-12937
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-12937
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework/security
>    Affects Versions: 18.12.13
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>
> While trying to upload PDF files I found a possible file race conditions in  DataServices::createFileMethod and DataServices::updateFileMethod
> The same could exist in several places in ImageManagementServices and ProductServices classes



--
This message was sent by Atlassian Jira
(v8.20.10#820010)