You are viewing a plain text version of this content. The canonical link for it is here.

Posted to notifications@ofbiz.apache.org by "Jacques Le Roux (Jira)" <ji...@apache.org> on 2024/12/09 05:28:00 UTC

[jira] [Updated] (OFBIZ-13192) Issues when uploading SVG files

     [ https://issues.apache.org/jira/browse/OFBIZ-13192?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Jacques Le Roux updated OFBIZ-13192:
------------------------------------
    Summary: Issues when uploading SVG files  (was: HttpRequestFileUpload includes "Content-Disposition" part and following)

> Issues when uploading SVG files
> -------------------------------
>
>                 Key: OFBIZ-13192
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-13192
>             Project: OFBiz
>          Issue Type: Bug
>          Components: ALL APPLICATIONS, ALL PLUGINS
>            Reporter: Danny Trunk
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 18.12.01
>
>
> There is something very annoying with SVG files, they almost all contain the word "class". Once you remove it from deniedWebShellTokens in security.properties those files pass and are uploaded w/o modification. I mean even its content, ie no Content-Disposition in it.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)