[ofbiz-framework] branch release18.12 updated: Improved: Unable to upload a file through ecommerce (OFBIZ-12636)

[jl...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

jleroux pushed a commit to branch release18.12
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/release18.12 by this push:
     new b2f5822343 Improved: Unable to upload a file through ecommerce (OFBIZ-12636)
b2f5822343 is described below

commit b2f58223430a78720a5e21a27d5810da2bf5cc20
Author: Jacques Le Roux <ja...@les7arts.com>
AuthorDate: Thu Jun 16 17:43:49 2022 +0200

    Improved: Unable to upload a file through ecommerce (OFBIZ-12636)
    
    Allows to check for only CSV files. This is not used OOTB in OFBiz.
    
    Thanks: Sachin for report and confirmation it's OK
---
 .../src/main/java/org/apache/ofbiz/security/SecuredUpload.java       | 5 +++++
 1 file changed, 5 insertions(+)

diff --git a/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java b/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
index 2adfb2fcc9..6ee56e9a43 100644
--- a/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
+++ b/framework/security/src/main/java/org/apache/ofbiz/security/SecuredUpload.java
@@ -265,6 +265,11 @@ public class SecuredUpload {
                 return true;
             }
             break;
+        case "CSV":
+            if (isValidCsvFile(fileToCheck)) {
+                return true;
+            }
+            break;
 
         default: // All
             if (isValidTextFile(fileToCheck, true)