public class DiskFileItemFactory extends java.lang.Object implements FileItemFactory
implementation. This implementation creates
FileItem instances which keep
content either in memory, for smaller items, or in a temporary file on disk,
for larger items. The size threshold, above which content will be stored on
disk, is configurable, as is the directory in which temporary files will be
If not otherwise configured, the default configuration values are as follows:
NOTE: Files are created in the system default temp directory with
predictable names. This means that a local attacker with write access to that
directory can perform a TOUTOC attack to replace any uploaded file with a
file of the attackers choice. The implications of this will depend on how the
uploaded file is used but could be significant. When using this
implementation in an environment with local, untrusted users,
setRepository(File) MUST be used to configure a repository location
that is not publicly writable. In a Servlet container the location identified
by the ServletContext attribute
may be used.
Temporary files, which are created for file items, should be deleted later on.
|Modifier and Type||Field and Description|
The default threshold above which uploads will be stored on disk.
|Constructor and Description|
Constructs an unconfigured instance of this class.
Constructs a preconfigured instance of this class.
|Modifier and Type||Method and Description|
Create a new
Returns the directory used to temporarily store files that are larger than the configured size threshold.
Returns the size threshold beyond which files are written directly to disk.
Sets the directory used to temporarily store files that are larger than the configured size threshold.
Sets the size threshold beyond which files are written directly to disk.
public static final int DEFAULT_SIZE_THRESHOLD
public DiskFileItemFactory(int sizeThreshold, java.io.File repository)
sizeThreshold- The threshold, in bytes, below which items will be retained in memory and above which they will be stored as a file.
repository- The data repository, which is the directory in which files will be created, should the item size exceed the threshold.
public java.io.File getRepository()
public void setRepository(java.io.File repository)
repository- The directory in which temporary files will be located.
public int getSizeThreshold()
public void setSizeThreshold(int sizeThreshold)
sizeThreshold- The size threshold, in bytes.
public FileItem createItem(java.lang.String fieldName, java.lang.String contentType, boolean isFormField, java.lang.String fileName)
DiskFileIteminstance from the supplied parameters and the local factory configuration.
fieldName- The name of the form field.
contentType- The content type of the form field.
trueif this is a plain form field;
fileName- The name of the uploaded file, if any, as supplied by the browser or other client.
Copyright © 2000-2017 Apache Software Foundation. All Rights Reserved.