users@jersey.java.net

Re: [Jersey] Sending a MultiPart JAXB object

From: paradisonoir <pourteymour_at_gmail.com>
Date: Tue, 24 Feb 2009 08:29:51 -0800 (PST)

Thanks Paul for your constant help.

Does it matter how am I sending my file? (form vs. client sending)? Cause in
my case, I want my client send files.

I think for this part :


Paul Sandoz wrote:
>
> I think you should be careful using the file name the client has given to
> be used directly for file operations on the server as a nasty client could
> create a file name that causes problems e.g. overwriting files and could
> thus be a security risk.
>

I am going to use certain session ID that are unique each time they are
generated, but you are right, it should be handled properly.


-- 
View this message in context: http://n2.nabble.com/Sending-a-MultiPart-JAXB-object-tp2378542p2378827.html
Sent from the Jersey mailing list archive at Nabble.com.