Details
-
Type:
Improvement
-
Status: Closed
-
Priority:
Major
-
Resolution: Fixed
-
Affects Version/s: None
-
Component/s: Framework, ICE-Components
-
Labels:None
-
Environment:Glimmer / sparkle
Description
Remove commons-fileupload.jar from glimmer/lib, since glimmer has no dependency on it.
Issue Links
- blocks
-
ICE-10355 update commons-fileupload library to v1.3.1 for security fix for ice:inputFile
-
- Closed
-
Imported a subset of apache commons fileupload into sparkle. Then imported a portion of apache commons io, which fileupload depended on. Altered the InputFilesPhaseListener to use the imported code, and removed the old jar and any ant usage of the jar.
It took a certain amount of effort to limit the io dependencies, as each class pulled in more and more of it. Finally, I found a way to include all of upload, even the parts we don't currently use, while truncating the io that we pulled in.
Subversion 22140
Subversion 22142