Anonymous | Login
Project:
RSS
  
News | My View | View Issues | Roadmap | Summary

View Issue DetailsJump to Notes ] Issue History ] Print ]
ID
0052268
TypeCategorySeverityReproducibilityDate SubmittedLast Update
defect[Openbravo ERP] A. Platformmajorhave not tried2023-04-26 18:032024-02-12 16:06
ReportershuehnerView Statuspublic 
Assigned Tomeriem_azaf 
PriorityhighResolutionfixedFixed in VersionPR24Q2
StatusclosedFix in branchFixed in SCM revision
ProjectionnoneETAnoneTarget Version
OSAnyDatabaseAnyJava version
OS VersionDatabase versionAnt version
Product VersionSCM revision 
Review Assigned To
Web browser
ModulesCore
Regression level
Regression date
Regression introduced in release
Regression introduced by commit
Triggers an Emergency PackNo
Summary

0052268: Update fileUpload library is outdated and should be updated to the latest release to use FileUploadBase#setFileCountMax

DescriptionThis library is outdated (version 1.4) and should be updated to the latest version (1.5)

https://github.com/apache/commons-fileupload/ [^]

That allows us to use FileUploadBase#setFileCountMax which should be either:
- set hardcoded
- make configurable but with sane default value applied by default
Steps To Reproduce.
TagsNo tags attached.
Attached Files

- Relationships Relation Graph ] Dependency Graph ]
related to feature request 0044937 closedcaristu Update fileUpload library 

-  Notes
(0150365)
AugustoMauch (manager)
2023-05-29 09:27

https://github.com/advisories/GHSA-hfrx-6qgj-fp6c [^]
(0150540)
hgbot (developer)
2023-05-31 12:52

Merge Request created: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/899 [^]
(0160633)
hgbot (developer)
2024-02-12 16:06

Merge request merged: https://gitlab.com/openbravo/product/openbravo/-/merge_requests/899 [^]
(0160634)
hgbot (developer)
2024-02-12 16:06

Directly closing issue as related merge request is already approved.

Repository: https://gitlab.com/openbravo/product/openbravo [^]
Changeset: 8069e182437fc9573ea241f6c467f6635e0acd16
Author: Meriem Azaf <meriem.azaf@openbravo.com>
Date: 12-02-2024 16:05:59
URL: https://gitlab.com/openbravo/product/openbravo/-/commit/8069e182437fc9573ea241f6c467f6635e0acd16 [^]

Fixes ISSUE-52268: Update fileUpload library to its latest vesrion (1.5)

Update fileUpload library to the latest version (1.5) to use FileUploadBase#setFileCountMax.

The BaseProcessActionHandler class now uses the new setFileCountMax API to limit the number of file uploads it will support. The exact number is
obtained by checking how many upload parameters are defined for the given process. We need to include as part of the max number the number of
other parameters (such as processId, windowId, etc)

---
A lib/runtime/commons-fileupload-1.5.jar
M legal/Licensing.txt
M modules/org.openbravo.client.application/src/org/openbravo/client/application/process/BaseProcessActionHandler.java
M modules/org.openbravo.client.application/web/org.openbravo.client.application/js/process/ob-parameter-window-view.js
M src-core/.classpath
R lib/runtime/commons-fileupload-1.4.jar
---

- Issue History
Date Modified Username Field Change
2023-04-26 18:03 shuehner New Issue
2023-04-26 18:03 shuehner Assigned To => Triage Platform Base
2023-04-26 18:03 shuehner Modules => Core
2023-04-26 18:03 shuehner Triggers an Emergency Pack => No
2023-04-26 18:03 shuehner Issue generated from 0044937
2023-04-26 18:03 shuehner Relationship added related to 0044937
2023-04-26 18:05 shuehner Summary Update fileUpload library is outdated and should be updated to the latest release => Update fileUpload library is outdated and should be updated to the latest release to use FileUploadBase#setFileCountMax
2023-04-26 18:05 shuehner Description Updated View Revisions
2023-05-24 07:18 alostale Type feature request => defect
2023-05-29 09:27 AugustoMauch Note Added: 0150365
2023-05-29 09:27 AugustoMauch Assigned To Triage Platform Base => meriem_azaf
2023-05-31 12:52 hgbot Note Added: 0150540
2024-02-12 16:06 hgbot Note Added: 0160633
2024-02-12 16:06 hgbot Resolution open => fixed
2024-02-12 16:06 hgbot Status new => closed
2024-02-12 16:06 hgbot Fixed in Version => PR24Q2
2024-02-12 16:06 hgbot Note Added: 0160634


Copyright © 2000 - 2009 MantisBT Group
Powered by Mantis Bugtracker