Currently, if a file starts with a newline, it gets removed
and the uploda succeeds (provided no hash is given).

Signed-off-by: Matthias Heiserer <m.heise...@proxmox.com>
---
 src/PVE/APIServer/AnyEvent.pm | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/src/PVE/APIServer/AnyEvent.pm b/src/PVE/APIServer/AnyEvent.pm
index f397a8c..545c122 100644
--- a/src/PVE/APIServer/AnyEvent.pm
+++ b/src/PVE/APIServer/AnyEvent.pm
@@ -1217,7 +1217,7 @@ sub file_upload_multipart {
            if ($hdl->{rbuf} =~
                s/^${delim_re}
                Content-Disposition:\ (.*?);\ name="(.*?)";\ 
filename="([^"]+)"${newline_re}
-               Content-Type:\ \S*\s+
+               Content-Type:\ \S*${newline_re}{2}
                //sxx
            ) {
                assert_form_disposition($1);
-- 
2.30.2



_______________________________________________
pve-devel mailing list
pve-devel@lists.proxmox.com
https://lists.proxmox.com/cgi-bin/mailman/listinfo/pve-devel

Reply via email to