Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.
And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.
Boundary info in Content-Type multipart request header not parsed correctly because of charset [SPR-17030]
See original GitHub issuebissorc opened SPR-17030 and commented
I’m using Spring Rest Template to upload a file. Code looks as follows:
MultipartBodyBuilder builder = new MultipartBodyBuilder();
builder.part("file", "2;3;4".getBytes());
MultiValueMap<String, HttpEntity<?>> body = builder.build();
HttpHeaders headers = new HttpHeaders();
headers.setAccept(Collections.singletonList(MediaType.ALL));
headers.setContentType(MediaType.MULTIPART_FORM_DATA);
HttpEntity<MultiValueMap<String, Object>> requestEntity = new HttpEntity(body, headers);
RestTemplate restTemplate = new RestTemplate();
restTemplate.postForLocation("***", requestEntity, String.class);
This leads to the following raw request:
POST *** HTTP/1.1
Accept: */*
Content-Type: multipart/form-data;boundary=059h2BBM-KlM_XP2rY8W1X3_jnzFLcYY;charset=UTF-8
User-Agent: Java/1.8.0_121
Host: ***:***
Connection: keep-alive
Content-Length: 187
--059h2BBM-KlM_XP2rY8W1X3_jnzFLcYY
Content-Disposition: form-data; name="file"
Content-Type: text/plain;charset=UTF-8
Content-Length: 5
2;3;4
--059h2BBM-KlM_XP2rY8W1X3_jnzFLcYY—
The problem is the following line:
Content-Type: multipart/form-data;boundary=059h2BBM-KlM_XP2rY8W1X3_jnzFLcYY;charset=UTF-8
Spring Rest Template adds ;charset=UTF-8 to the content type and this leads to problems when. I found no possibility to remove the charset. From my point of view this is a bug since the charset should not be part of the content type?!
Affects: 5.0.7
Issue Links:
- #21599 Multipart: Invalid boundary with RestTemplate (“is duplicated by”)
Referenced from: commits https://github.com/spring-projects/spring-framework/commit/f89511e7fe9c32ad28de2c00a6197ca9ad6ce937, https://github.com/spring-projects/spring-framework/commit/390bb871d85f56aaeed98aeb45d688fcf35af8e7
Issue Analytics
- State:
- Created 5 years ago
- Comments:13
Top Results From Across the Web
Top Related Medium Post
Top Related StackOverflow Question
Troubleshoot Live Code
Top Related Reddit Thread
Top Related Hackernoon Post
Top Related Tweet
Top Related Dev.to Post
Top Related Hashnode Post
bissorc commented
Brian Clozel: for the H2O server this will work:
Joe Amoros commented
Brian Clozel - Hmm bummer. Just gave it a try. I see the change, but still getting the error. Here’s the logging and below, the error. I removed the body from the logging to save space. I’ll keep digging. Thanks again!
From Apache/ModSecurity
A little extra info, this is the config that is failing in modsecurity
One last bit, if I add a whitelist in the modsecurity config like so:
The file uploads, but we still get a warning:
Cheers!