[Owasp-csrfguard] "multipart/form-data" form not working on Java

[Marcos Felipe]

Hi there,

I'm mailing to you as last resort, I could not find anything on the web
about this issue on CSRFGuard for java.

The thing is: if your form have enctype="multipart/form-data",
HttpServletRequest.getParameter() method will always return null and
CSRFGuard will never find the key.

I'm trying to fix it using Oreilly's MultipartRequest (
http://www.servlets.com/cos/index.html), but I don't know if this is the
best approach.

Did anyone ever saw this?

Thanks and best regards,
Marcos
-------------- next part --------------
An HTML attachment was scrubbed...
URL: https://lists.owasp.org/pipermail/owasp-csrfguard/attachments/20110218/acb0fa83/attachment.html