org.apache.commons.fileupload

Class InvalidFileNameException

java.lang.Object

java.lang.Throwable

java.lang.Exception

java.lang.RuntimeException

org.apache.commons.fileupload.InvalidFileNameException

All Implemented Interfaces:

java.io.Serializable

public class InvalidFileNameException
extends java.lang.RuntimeException

This exception is thrown in case of an invalid file name. A file name is invalid, if it contains a NUL character. Attackers might use this to circumvent security checks: For example, a malicious user might upload a file with the name "foo.exe\0.png". This file name might pass security checks (i.e. checks for the extension ".png"), while, depending on the underlying C library, it might create a file named "foo.exe", as the NUL character is the string terminator in C.

Version:

$Id$

See Also:

Serialized Form

Field Summary

Fields

Modifier and Type	Field and Description
private java.lang.String	name The file name causing the exception.
private static long	serialVersionUID Serial version UID, being used, if the exception is serialized.

Constructor Summary

Constructors

Constructor and Description
InvalidFileNameException(java.lang.String pName, java.lang.String pMessage) Creates a new instance.

Method Summary

Modifier and Type	Method and Description
java.lang.String	getName() Returns the invalid file name.

Methods inherited from class java.lang.Throwable

addSuppressed, fillInStackTrace, getCause, getLocalizedMessage, getMessage, getStackTrace, getSuppressed, initCause, printStackTrace, printStackTrace, printStackTrace, setStackTrace, toString

Methods inherited from class java.lang.Object

clone, equals, finalize, getClass, hashCode, notify, notifyAll, wait, wait, wait

Field Detail

serialVersionUID

private static final long serialVersionUID

Serial version UID, being used, if the exception is serialized.

See Also:

Constant Field Values

name

private final java.lang.String name

The file name causing the exception.

Constructor Detail

InvalidFileNameException

public InvalidFileNameException(java.lang.String pName,
                                java.lang.String pMessage)

Creates a new instance.

Parameters:

pName - The file name causing the exception.

pMessage - A human readable error message.

Method Detail

getName

public java.lang.String getName()

Returns the invalid file name.

Returns:

the invalid file name.