[richfaces-issues] [JBoss JIRA] Assigned: (RF-6525) rich:fileUpload createTempfiles directory should be made configurable.
Jay Balunas (JIRA)
jira-events at lists.jboss.org
Thu Apr 22 21:41:16 EDT 2010
[ https://jira.jboss.org/jira/browse/RF-6525?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]
Jay Balunas reassigned RF-6525:
-------------------------------
Assignee: Konstantin Mishin
This is a potential security issues, and should be fairly simple to implement.
> rich:fileUpload createTempfiles directory should be made configurable.
> ----------------------------------------------------------------------
>
> Key: RF-6525
> URL: https://jira.jboss.org/jira/browse/RF-6525
> Project: RichFaces
> Issue Type: Feature Request
> Security Level: Public(Everyone can see)
> Affects Versions: 3.3.0
> Environment: All
> Reporter: sathya sayee
> Assignee: Konstantin Mishin
> Fix For: Future
>
>
> rich:fileUpload control's createTempFile can be configured as init-param in web.xml.
> The real problem is when createTempfile is true, the temp files in linux environment gets created in the <tomcat installation directory>/temp. This should be configurable and poses a security risk since the temp files do not even get deleted until the application is restarted.
--
This message is automatically generated by JIRA.
-
If you think it was sent incorrectly contact one of the administrators: https://jira.jboss.org/jira/secure/Administrators.jspa
-
For more information on JIRA, see: http://www.atlassian.com/software/jira
More information about the richfaces-issues
mailing list