Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

request headers and 2176 security issue #4

Closed
GoogleCodeExporter opened this issue Nov 9, 2015 · 1 comment
Closed

request headers and 2176 security issue #4

GoogleCodeExporter opened this issue Nov 9, 2015 · 1 comment

Comments

@GoogleCodeExporter
Copy link

So the 2176 security issue rears its ugly head when submitting multi-part 
data across triggered by an ExternalInterface call.

I read elsewhere about the problem and figured it wasn't able to be fixed. 
Turns out it can. 

I'm not sure why the "cotentType" property was set and not the 
"requestHeaders" but if within the doSend() method you change:

urlRequest.contentType = 'multipart/form-data; boundary=' + getBoundary();

TO:

urlRequest.requestHeaders.push(new URLRequestHeader("Content-Type", 
'multipart/form-data; boundary=' + getBoundary()));


Everything seems to work then even with ExternalInterface. Again I really 
don't know why it was the other way, but this class is really convenient 
and great. It makes adding data a very simple both strings and file data. 
So I really love this class. Hope this helps.

Original issue reported on code.google.com by Tom.Maia...@gmail.com on 24 Feb 2010 at 11:49

@GoogleCodeExporter
Copy link
Author


This one is already fixed and commited couple of days later.
please update for the latest version form Repository

Thanx.

Original comment by zatepya...@gmail.com on 25 Feb 2010 at 2:16

  • Changed state: Done

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Projects
None yet
Development

No branches or pull requests

1 participant