You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tapestry.apache.org by bo...@apache.org on 2014/03/03 05:11:53 UTC
git commit: Fixed TAP5-2295 (denial of service vulnerability due to
commons-file-upload) by upgrading commons-file-upload from 1.2.2 to 1.3.1,
which also required upgrading commons-io from 2.0.1 to 2.2.
Repository: tapestry-5
Updated Branches:
refs/heads/master c4c5c354f -> 9dfe22e08
Fixed TAP5-2295 (denial of service vulnerability due to
commons-file-upload) by upgrading commons-file-upload from 1.2.2 to
1.3.1, which also required upgrading commons-io from 2.0.1 to 2.2.
Project: http://git-wip-us.apache.org/repos/asf/tapestry-5/repo
Commit: http://git-wip-us.apache.org/repos/asf/tapestry-5/commit/9dfe22e0
Tree: http://git-wip-us.apache.org/repos/asf/tapestry-5/tree/9dfe22e0
Diff: http://git-wip-us.apache.org/repos/asf/tapestry-5/diff/9dfe22e0
Branch: refs/heads/master
Commit: 9dfe22e08556da76d7a35a79d599f4b9a527c4e1
Parents: c4c5c35
Author: Bob Harner <bo...@apache.org>
Authored: Sun Mar 2 23:11:18 2014 -0500
Committer: Bob Harner <bo...@apache.org>
Committed: Sun Mar 2 23:11:18 2014 -0500
----------------------------------------------------------------------
tapestry-upload/build.gradle | 4 ++--
.../upload/internal/services/StubFileItem.java | 12 ++++++++++++
2 files changed, 14 insertions(+), 2 deletions(-)
----------------------------------------------------------------------
http://git-wip-us.apache.org/repos/asf/tapestry-5/blob/9dfe22e0/tapestry-upload/build.gradle
----------------------------------------------------------------------
diff --git a/tapestry-upload/build.gradle b/tapestry-upload/build.gradle
index b149b46..238a92e 100644
--- a/tapestry-upload/build.gradle
+++ b/tapestry-upload/build.gradle
@@ -2,8 +2,8 @@ description = "File Upload component, with supporting services"
dependencies {
compile project(':tapestry-core')
- compile "commons-fileupload:commons-fileupload:1.2.2"
- compile "commons-io:commons-io:2.0.1"
+ compile "commons-fileupload:commons-fileupload:1.3.1"
+ compile "commons-io:commons-io:2.2"
provided "javax.servlet:servlet-api:${versions.servletapi}"
testCompile project(':tapestry-test')
http://git-wip-us.apache.org/repos/asf/tapestry-5/blob/9dfe22e0/tapestry-upload/src/test/java/org/apache/tapestry5/upload/internal/services/StubFileItem.java
----------------------------------------------------------------------
diff --git a/tapestry-upload/src/test/java/org/apache/tapestry5/upload/internal/services/StubFileItem.java b/tapestry-upload/src/test/java/org/apache/tapestry5/upload/internal/services/StubFileItem.java
index 6ad93a6..af14526 100755
--- a/tapestry-upload/src/test/java/org/apache/tapestry5/upload/internal/services/StubFileItem.java
+++ b/tapestry-upload/src/test/java/org/apache/tapestry5/upload/internal/services/StubFileItem.java
@@ -15,6 +15,7 @@
package org.apache.tapestry5.upload.internal.services;
import org.apache.commons.fileupload.FileItem;
+import org.apache.commons.fileupload.FileItemHeaders;
import java.io.*;
@@ -131,4 +132,15 @@ public class StubFileItem implements FileItem
{
return isDeleted;
}
+
+ /* unused method but required by FileItem interface */
+ public FileItemHeaders getHeaders()
+ {
+ return null;
+ }
+
+ /* unused method but required by FileItem interface */
+ public void setHeaders(FileItemHeaders headers)
+ {
+ }
}