Examples of org.apache.commons.fileupload.disk.DiskFileItemFactory

Package org.apache.commons.fileupload.disk

Examples of org.apache.commons.fileupload.disk.DiskFileItemFactory

org.apache.commons.fileupload.disk.DiskFileItemFactory
The default {@link org.apache.commons.fileupload.FileItemFactory}implementation. This implementation creates {@link org.apache.commons.fileupload.FileItem} instances which keep theircontent either in memory, for smaller items, or in a temporary file on disk, for larger items. The size threshold, above which content will be stored on disk, is configurable, as is the directory in which temporary files will be created.

If not otherwise configured, the default configuration values are as follows:
- Size threshold is 10KB.
- Repository is the system default temp directory, as returned by System.getProperty("java.io.tmpdir").
NOTE: Files are created in the system default temp directory with predictable names. This means that a local attacker with write access to that directory can perform a TOUTOC attack to replace any uploaded file with a file of the attackers choice. The implications of this will depend on how the uploaded file is used but could be significant. When using this implementation in an environment with local, untrusted users, {@link #setRepository(File)} MUST be used to configure a repository locationthat is not publicly writable. In a Servlet container the location identified by the ServletContext attribute javax.servlet.context.tempdir may be used.

Temporary files, which are created for file items, should be deleted later on. The best way to do this is using a {@link FileCleaningTracker}, which you can set on the {@link DiskFileItemFactory}. However, if you do use such a tracker, then you must consider the following: Temporary files are automatically deleted as soon as they are no longer needed. (More precisely, when the corresponding instance of {@link java.io.File} is garbage collected.)This is done by the so-called reaper thread, which is started automatically when the class {@link org.apache.commons.io.FileCleaner}is loaded. It might make sense to terminate that thread, for example, if your web application ends. See the section on "Resource cleanup" in the users guide of commons-fileupload.
@since FileUpload 1.1 @version $Id: DiskFileItemFactory.java 1455094 2013-03-11 11:00:14Z simonetripodi $

  @SuppressWarnings("unchecked")
  @Override
  protected void service(HttpServletRequest req, HttpServletResponse resp)throws ServletException, IOException {
    
    
    ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
    
        try {
      List<DiskFileItem> fileItems = upload.parseRequest(req);
      for (DiskFileItem fileItem : fileItems) {
        fileItem.write(new File(savePath+"/"+fileItem.getName()));

View Full Code Here

      throw new InvalidParameterException("Cant parse uploaded file " + item.getName(), e);
    }
  }


  protected ServletFileUpload createServletFileUpload(MultipartConfig config) {
    DiskFileItemFactory factory = new DiskFileItemFactory();
    factory.setRepository(config.getDirectory());


    logger.debug("Using repository {} for file upload", factory.getRepository());


    return new ServletFileUpload(factory);
  }

View Full Code Here

        PrintWriter writer = new PrintWriter(stringWriter);


        boolean uploadFailed = true;
        
        // Create a new file upload handler
        DiskFileItemFactory factory = new DiskFileItemFactory();
        factory.setRepository(deployed);
        ServletFileUpload upload = new ServletFileUpload(factory);


        // Set upload parameters
        upload.setSizeMax(-1);

View Full Code Here

                                                              int repositoryThreshold,


                                                              @Symbol(UploadSymbols.REPOSITORY_LOCATION)
                                                              String repositoryLocation)
    {
        return new DiskFileItemFactory(repositoryThreshold, new File(repositoryLocation));
    }

View Full Code Here

            "\r\n" +
            "This is the content of the file\n" +
            "\r\n" +
            "-----1234--\r\n";


        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(-1);
        HttpServletRequest req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        List<FileItem> fileItems = upload.parseRequest(req);
        assertEquals(1, fileItems.size());
        FileItem item = fileItems.get(0);
        assertEquals("This is the content of the file\n", new String(item.get()));


        upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(40);
        req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        fileItems = upload.parseRequest(req);
        assertEquals(1, fileItems.size());
        item = fileItems.get(0);
        assertEquals("This is the content of the file\n", new String(item.get()));


        upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(30);
        req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        try {
            upload.parseRequest(req);
            fail("Expected exception.");

View Full Code Here

            "\r\n" +
            "This is the content of the file\n" +
            "\r\n" +
            "-----1234--\r\n";


        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(-1);
        HttpServletRequest req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        List<FileItem> fileItems = upload.parseRequest(req);
        assertEquals(1, fileItems.size());
        FileItem item = fileItems.get(0);
        assertEquals("This is the content of the file\n", new String(item.get()));


        upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(40);
        req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        fileItems = upload.parseRequest(req);
        assertEquals(1, fileItems.size());
        item = fileItems.get(0);
        assertEquals("This is the content of the file\n", new String(item.get()));


        // provided Content-Length is larger than the FileSizeMax -> handled by ctor
        upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(5);
        req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        try {
            upload.parseRequest(req);
            fail("Expected exception.");
        } catch (FileUploadBase.FileSizeLimitExceededException e) {
            assertEquals(5, e.getPermittedSize());
        }


        // provided Content-Length is wrong, actual content is larger -> handled by LimitedInputStream
        upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(15);
        req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        try {
            upload.parseRequest(req);
            fail("Expected exception.");

View Full Code Here

            "\r\n" +
            "This is the content of the file\n" +
            "\r\n" +
            "-----1234--\r\n";


        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(-1);
        upload.setSizeMax(200);


        MockHttpServletRequest req = new MockHttpServletRequest(request.getBytes("US-ASCII"), CONTENT_TYPE);
        try {

View Full Code Here

            "\r\n" +
            "This is the content of the file\n" +
            "\r\n" +
            "-----1234--\r\n";


        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        upload.setFileSizeMax(-1);
        upload.setSizeMax(300);


        // the first item should be within the max size limit
        // set the read limit to 10 to simulate a "real" stream

View Full Code Here

    protected List<FileItem> parseUpload(byte[] bytes) throws FileUploadException {
        return parseUpload(bytes, CONTENT_TYPE);
    }


    protected List<FileItem> parseUpload(byte[] bytes, String contentType) throws FileUploadException {
        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        HttpServletRequest request = new MockHttpServletRequest(bytes, contentType);


        List<FileItem> fileItems = upload.parseRequest(request);
        return fileItems;
    }

View Full Code Here

                      "Content-Disposition: form-data; name=\"multi\"\r\n" +
                      "\r\n" +
                      "value2\r\n" +
                      "-----1234--\r\n";
        byte[] bytes = text.getBytes("US-ASCII");
        ServletFileUpload upload = new ServletFileUpload(new DiskFileItemFactory());
        HttpServletRequest request = new MockHttpServletRequest(bytes, CONTENT_TYPE);


        Map<String, List<FileItem>> mappedParameters = upload.parseParameterMap(request);
        assertTrue(mappedParameters.containsKey("file"));
        assertEquals(1, mappedParameters.get("file").size());

View Full Code Here

0 1 2 3 4 5 6 7 8 9

TOP

Related Classes of org.apache.commons.fileupload.disk.DiskFileItemFactory

bg.smoc.web.servlet.judge.contest.UploadTestDataServlet

br.com.caelum.vraptor.interceptor.multipart.CommonsUploadMultipartInterceptor

br.com.caelum.vraptor.observer.upload.CommonsUploadMultipartObserver

ca.carleton.gcrc.upload.UploadServlet

ch.entwine.weblounge.common.impl.site.ActionSupport

com.adm.ctl.CoreCtl

com.baidu.ueditor.um.Uploader

com.britesnow.snow.web.WebController

com.director.core.RequestHandler$FormUploadRequestHandler

com.evasion.common.inputfile.UploadFilter

All source code are property of their respective owners. Java is a trademark of Sun Microsystems, Inc and owned by ORACLE Inc. Contact coftware#gmail.com.