1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
|
/*******************************************************************************
* Copyright (c) 2016, 2019 Raymond Augé and others.
*
* This program and the accompanying materials
* are made available under the terms of the Eclipse Public License 2.0
* which accompanies this distribution, and is available at
* https://www.eclipse.org/legal/epl-2.0/
*
* SPDX-License-Identifier: EPL-2.0
*
* Contributors:
* Raymond Augé <raymond.auge@liferay.com> - Bug 497271
*******************************************************************************/
package org.eclipse.equinox.http.servlet.internal.multipart;
import java.io.*;
import java.security.AccessControlContext;
import java.util.HashMap;
import java.util.Map;
import javax.servlet.ServletContext;
import javax.servlet.ServletException;
import javax.servlet.http.HttpServletRequest;
import javax.servlet.http.Part;
import org.apache.commons.fileupload.FileUploadException;
import org.apache.commons.fileupload.disk.DiskFileItem;
import org.apache.commons.fileupload.disk.DiskFileItemFactory;
import org.apache.commons.fileupload.servlet.ServletFileUpload;
import org.osgi.framework.Bundle;
import org.osgi.framework.BundleContext;
import org.osgi.service.http.runtime.dto.ServletDTO;
public class MultipartSupportImpl implements MultipartSupport {
public MultipartSupportImpl(ServletDTO servletDTO, ServletContext servletContext) {
this.servletDTO = servletDTO;
// Must return non-null File. See Servlet 3.1 §4.8.1
File baseStorage = (File)servletContext.getAttribute(ServletContext.TEMPDIR);
if (servletDTO.multipartLocation.length() > 0) {
File storage = new File(servletDTO.multipartLocation);
if (!storage.isAbsolute()) {
storage = new File(baseStorage, storage.getPath());
}
baseStorage = storage;
}
checkPermission(baseStorage, servletContext);
baseStorage.mkdirs();
DiskFileItemFactory factory = new DiskFileItemFactory();
factory.setRepository(baseStorage);
if (servletDTO.multipartFileSizeThreshold > 0) {
factory.setSizeThreshold(servletDTO.multipartFileSizeThreshold);
}
upload = new ServletFileUpload(factory);
if (servletDTO.multipartMaxFileSize > -1L) {
upload.setFileSizeMax(servletDTO.multipartMaxFileSize);
}
if (servletDTO.multipartMaxRequestSize > -1L) {
upload.setSizeMax(servletDTO.multipartMaxRequestSize);
}
}
private void checkPermission(File baseStorage, ServletContext servletContext) {
BundleContext bundleContext = (BundleContext)servletContext.getAttribute("osgi-bundlecontext"); //$NON-NLS-1$
Bundle bundle = bundleContext.getBundle();
AccessControlContext accessControlContext = bundle.adapt(AccessControlContext.class);
if (accessControlContext == null) return;
accessControlContext.checkPermission(new FilePermission(baseStorage.getAbsolutePath(), "read,write")); //$NON-NLS-1$
}
@Override
public Map<String, Part> parseRequest(HttpServletRequest request) throws IOException, ServletException {
if (upload == null) {
throw new IllegalStateException("Servlet was not configured for multipart!"); //$NON-NLS-1$
}
if (!servletDTO.multipartEnabled) {
throw new IllegalStateException("No multipart config on " + servletDTO); //$NON-NLS-1$
}
if (!ServletFileUpload.isMultipartContent(request)) {
throw new ServletException("Not a multipart request!"); //$NON-NLS-1$
}
Map<String, Part> parts = new HashMap<String, Part>();
try {
for (Object item : upload.parseRequest(request)) {
DiskFileItem diskFileItem = (DiskFileItem)item;
parts.put(diskFileItem.getFieldName(), new MultipartSupportPart(diskFileItem));
}
}
catch (FileUploadException fnfe) {
throw new IOException(fnfe);
}
return parts;
}
private final ServletDTO servletDTO;
private final ServletFileUpload upload;
}
|
