> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
--
View this message in context:
http://www.nabble.com/-S2--Parameterized-File-Downloading-tf4191759.html#a11976775
Sent from the Struts - User mailing list archive
Grish wrote:
Get image
So does this generate a link relative to your webapp of
filedownload/download.action?inputPath=/images/test.gif
?
( note, ".action" could be ".do", ".html" or whatever you have that
extension set to, apparently even "". (I may have to try that in my
app...) )
;
> -
> To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
--
View this message in context:
http://www.nabble.co
Grish wrote:
Hmmm good point. So does this mean that the only secure way of having
downloads is to have specific actions for each download? Or is there a
better approach?
I don't claim to know what the best approach is. As long as your action
does sufficient validation of the specified input
t;> with
>> the name [inputStream] in the invocation stack
>>
>> Is there another way i should be setting my inputPath parameter for my
>> File
>> or do I just have to make a lot of actions for each of my download?
>>
>>
>>
>
>
> ---
t; To unsubscribe, e-mail: [EMAIL PROTECTED]
> For additional commands, e-mail: [EMAIL PROTECTED]
>
>
>
--
View this message in context:
http://www.nabble.com/-S2--Parameterized-File-Downloading-tf4191759.html#a11938299
Grish wrote:
I studied the struts showcase sample of file downloading. I wanted to do
something similar but instead of setting the inputPath paremeter in
struts.xml I wanted to pass it in the url.
Sounds like you're opening a very large security hole here...
-Dale
Hi,
Is it a typo, I dont see a tag in ur code?
Thanks,
Nuwan
Grish wrote:
I studied the struts showcase sample of file downloading. I wanted to do
something similar but instead of setting the inputPath paremeter in
struts.xml I wanted to pass it in the url. I was thinking of using the same
a
le.com/-S2--Parameterized-File-Downloading-tf4191759.html#a11920666
Sent from the Struts - User mailing list archive at Nabble.com.
-
To unsubscribe, e-mail: [EMAIL PROTECTED]
For additional commands, e-mail: [EMAIL PROTECTED]
9 matches
Mail list logo