Regression -Multipart/form-data POST having a quoted boundary parameter in the Content-Type header fails.

[glassfishrobot]

Jersey returns HTTP status 400 when POST-ing a multipart/form-data having a quoted boundary parameter in the Content-Type header:
Content-Type: multipart/form-data;boundary="MrmiiyyJEqRYcIJyun5tMVIz70NuQ_nfD"
and use MrmiiyyJEqRYcIJyun5tMVIz70NuQ_nfD (without quotes) to separate the parts.

Use com.sun.jersey.spi.spring.container.servlet.SpringServlet.
Exception is thrown in jersey class com.sun.jersey.multipart.impl.MultiPartReaderClientSide, method readMultiPart. (org.jvnet.mimepull.MIMEParsingException: Missing start boundary).

RFC2046 states that quoted boundary values are permitted (http://www.ietf.org/rfc/rfc2046.txt)::)
"
WARNING TO IMPLEMENTORS: The grammar for parameters on the Content-
type field is such that it is often necessary to enclose the boundary
parameter values in quotes on the Content-type line. This is not
always necessary, but never hurts. Implementors should be sure to
study the grammar carefully in order to avoid producing invalid
Content-type fields. Thus, a typical "multipart" Content-Type header
field might look like this:
Content-Type: multipart/mixed; boundary=gc0p4Jq0M2Yt08j34c0p

But the following is not valid:
Content-Type: multipart/mixed; boundary=gc0pJq0M:08jU534c0p
(because of the colon) and must instead be represented as
Content-Type: multipart/mixed; boundary="gc0pJq0M:08jU534c0p"
".

Affected Versions

[2.15]

[glassfishrobot]

Reported by jontejj

[glassfishrobot]

File: does_not_work_but_is_valid
Attached By: jontejj

[glassfishrobot]

Issue-Links:
clones
JERSEY-1420

[glassfishrobot]

Was assigned to michalgajdos

[glassfishrobot]

jontejj said:
This affects version 2.15 (I don't have rights to edit fields).
My suggested fix is to:

mediaType = unquoteMediaTypeParameters(mediaType, "boundary");

protected static MediaType unquoteMediaTypeParameters(final MediaType mediaType, final String... parameters) {
if (parameters == null || parameters.length == 0)

{ return mediaType; }

final HashMap<String, String> unquotedParams = new HashMap<String, String>(mediaType.getParameters());

for (final String parameterName : parameters) {
String parameterValue = mediaType.getParameters().get(parameterName);

if (parameterValue.startsWith("""))

{ parameterValue = parameterValue.substring(1, parameterValue.length() - 1); unquotedParams.put(parameterName, parameterValue); }

}

return new MediaType(mediaType.getType(), mediaType.getSubtype(), unquotedParams);
}

Like MultiPartReaderClientSide looks like in com.sun.jersey.contribs/jersey-multipart/1.15. I'll send a PR to github.

[glassfishrobot]

jontejj said:
Pull request: https://github.com/jersey/jersey/pull/143

[glassfishrobot]

Marked as fixed on Tuesday, February 24th 2015, 8:42:32 am

[glassfishrobot]

This issue was imported from java.net JIRA JERSEY-2776