Commit f69ad103 authored by Henry Clifford's avatar Henry Clifford Committed by Andrew Bonventre

mime/multipart: test for presence of filename instead of content-type

Fixes #24041

Preserving the intended fix in https://go.googlesource.com/go/+/81ec7256072ed5e20b8827c583193258769aebc0

Change-Id: I600d3d7edc74ca072a066739e2ef3235877d808f
GitHub-Last-Rev: 14973d7c2bf4022c28ef4b4984ec3cd352c1d4d8
GitHub-Pull-Request: golang/go#24104
Reviewed-on: https://go-review.googlesource.com/96975Reviewed-by: default avatarAndrew Bonventre <andybons@golang.org>
Run-TryBot: Andrew Bonventre <andybons@golang.org>
TryBot-Result: Gobot Gobot <gobot@golang.org>
parent 0eacf8cb
...@@ -58,8 +58,7 @@ func (r *Reader) readForm(maxMemory int64) (_ *Form, err error) { ...@@ -58,8 +58,7 @@ func (r *Reader) readForm(maxMemory int64) (_ *Form, err error) {
var b bytes.Buffer var b bytes.Buffer
_, hasContentTypeHeader := p.Header["Content-Type"] if !p.hasFileName() {
if !hasContentTypeHeader && filename == "" {
// value, store as string in memory // value, store as string in memory
n, err := io.CopyN(&b, p, maxValueBytes+1) n, err := io.CopyN(&b, p, maxValueBytes+1)
if err != nil && err != io.EOF { if err != nil && err != io.EOF {
......
...@@ -55,6 +55,21 @@ func TestReadFormWithNamelessFile(t *testing.T) { ...@@ -55,6 +55,21 @@ func TestReadFormWithNamelessFile(t *testing.T) {
} }
func TestReadFormWithTextContentType(t *testing.T) {
// From https://github.com/golang/go/issues/24041
b := strings.NewReader(strings.Replace(messageWithTextContentType, "\n", "\r\n", -1))
r := NewReader(b, boundary)
f, err := r.ReadForm(25)
if err != nil {
t.Fatal("ReadForm:", err)
}
defer f.RemoveAll()
if g, e := f.Value["texta"][0], textaValue; g != e {
t.Errorf("texta value = %q, want %q", g, e)
}
}
func testFile(t *testing.T, fh *FileHeader, efn, econtent string) File { func testFile(t *testing.T, fh *FileHeader, efn, econtent string) File {
if fh.Filename != efn { if fh.Filename != efn {
t.Errorf("filename = %q, want %q", fh.Filename, efn) t.Errorf("filename = %q, want %q", fh.Filename, efn)
...@@ -94,6 +109,15 @@ Content-Type: text/plain ...@@ -94,6 +109,15 @@ Content-Type: text/plain
--MyBoundary-- --MyBoundary--
` `
const messageWithTextContentType = `
--MyBoundary
Content-Disposition: form-data; name="texta"
Content-Type: text/plain
` + textaValue + `
--MyBoundary
`
const message = ` const message = `
--MyBoundary --MyBoundary
Content-Disposition: form-data; name="filea"; filename="filea.txt" Content-Disposition: form-data; name="filea"; filename="filea.txt"
......
...@@ -81,6 +81,16 @@ func (p *Part) FileName() string { ...@@ -81,6 +81,16 @@ func (p *Part) FileName() string {
return p.dispositionParams["filename"] return p.dispositionParams["filename"]
} }
// hasFileName determines if a (empty or otherwise)
// filename parameter was included in the Content-Disposition header
func (p *Part) hasFileName() bool {
if p.dispositionParams == nil {
p.parseContentDisposition()
}
_, ok := p.dispositionParams["filename"]
return ok
}
func (p *Part) parseContentDisposition() { func (p *Part) parseContentDisposition() {
v := p.Header.Get("Content-Disposition") v := p.Header.Get("Content-Disposition")
var err error var err error
......
Markdown is supported
0%
or
You are about to add 0 people to the discussion. Proceed with caution.
Finish editing this message first!
Please register or to comment