[jira] [Commented] (OFBIZ-13139) SecuredUpload, impossible to upload a text file in the "All" case

["ASF subversion and git services (Jira)" <ji...@apache.org>]

    [ https://issues.apache.org/jira/browse/OFBIZ-13139?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17880872#comment-17880872 ] 

ASF subversion and git services commented on OFBIZ-13139:
---------------------------------------------------------

Commit 377b3013c89f2b35e9d399d31ac473b55c65df5b in ofbiz-framework's branch refs/heads/release18.12 from Jacques Le Roux
[ https://gitbox.apache.org/repos/asf?p=ofbiz-framework.git;h=377b3013c8 ]

Fixed: SecuredUpload, impossible to upload a text file in the "All" case (OFBIZ-13139)

Even valid text files (ie not containing any token of deniedWebShellTokens)
don't pass because they are stopped by the exception "PDF header signature not found".

This is due to the PDF check in the "All" case and that fixes it.


> SecuredUpload, impossible to upload a text file in the "All" case
> -----------------------------------------------------------------
>
>                 Key: OFBIZ-13139
>                 URL: https://issues.apache.org/jira/browse/OFBIZ-13139
>             Project: OFBiz
>          Issue Type: Bug
>          Components: framework/security
>    Affects Versions: 18.12.16
>            Reporter: Jacques Le Roux
>            Assignee: Jacques Le Roux
>            Priority: Major
>             Fix For: 18.12.17
>
>
> Even valid text files (ie not containing any token of deniedWebShellTokens) don't pass because they are stopped by the exception "PDF header signature not found".
> This is due to the PDF check in the "All" case.



--
This message was sent by Atlassian Jira
(v8.20.10#820010)