[jira] [Updated] (METRON-2350) HandleHttpRequest puts form data content into attributes

["Otto Fowler (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/METRON-2350?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Otto Fowler updated METRON-2350:
--------------------------------
    Description: 
HandleHttpParameters writes attributes for get return from HttpServletRequest.getParameters().

getParameters() is defined as returning a value for each query part OR form data value.
As such, large bits of data, send as part of multipart/form data will end up in the attributes, which is not what we want.

The processor also does not document writing this attribute.

The processor should NOT write parameter values for parameters that are part of the form data if possible.

an example from log attributes:


{noformat}
Key: 'http.multipart.content.type'
	Value: 'text/plain'
Key: 'http.multipart.fragments.sequence.number'
	Value: '1'
Key: 'http.multipart.fragments.total.number'
	Value: '3'
Key: 'http.multipart.name'
	Value: 'upload-data'
Key: 'http.multipart.size'
	Value: '18'
Key: 'http.param.DataTwo'
	Value: 'DATA TWO!!!!'
Key: 'http.param.data1'
	Value: 'DATA ONE!!!'
Key: 'http.param.upload-data'
	Value: 'Flowfile content!!'

{noformat}


  was:
HandleHttpParameters writes attributes for get return from HttpServletRequest.getParameters().

getParameters() is defined as returning a value for each query part OR form data value.
As such, large bits of data, send as part of multipart/form data will end up in the attributes, which is not what we want.

The processor also does not document writing this attribute.

The processor should NOT write parameter values for parameters that are part of the form data if possible.



> HandleHttpRequest puts form data content into attributes
> --------------------------------------------------------
>
>                 Key: METRON-2350
>                 URL: https://issues.apache.org/jira/browse/METRON-2350
>             Project: Metron
>          Issue Type: Bug
>            Reporter: Otto Fowler
>            Assignee: Otto Fowler
>            Priority: Major
>
> HandleHttpParameters writes attributes for get return from HttpServletRequest.getParameters().
> getParameters() is defined as returning a value for each query part OR form data value.
> As such, large bits of data, send as part of multipart/form data will end up in the attributes, which is not what we want.
> The processor also does not document writing this attribute.
> The processor should NOT write parameter values for parameters that are part of the form data if possible.
> an example from log attributes:
> {noformat}
> Key: 'http.multipart.content.type'
> 	Value: 'text/plain'
> Key: 'http.multipart.fragments.sequence.number'
> 	Value: '1'
> Key: 'http.multipart.fragments.total.number'
> 	Value: '3'
> Key: 'http.multipart.name'
> 	Value: 'upload-data'
> Key: 'http.multipart.size'
> 	Value: '18'
> Key: 'http.param.DataTwo'
> 	Value: 'DATA TWO!!!!'
> Key: 'http.param.data1'
> 	Value: 'DATA ONE!!!'
> Key: 'http.param.upload-data'
> 	Value: 'Flowfile content!!'
> {noformat}



--
This message was sent by Atlassian Jira
(v8.3.4#803005)