diff --git a/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch b/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch new file mode 100644 index 0000000000000000000000000000000000000000..391ec4ed8a3d015921ce5793f69be3e5d6e47505 --- /dev/null +++ b/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch @@ -0,0 +1,32 @@ +From ed32f36b3feb8bbf1edaed4875b9820c9a71792e Mon Sep 17 00:00:00 2001 +From: Marcel Hellkamp +Date: Wed, 7 Jul 2021 13:02:33 +0200 +Subject: [PATCH] Fix: Multipart file uploads with empty filename not detected + as binary. + +--- + bottle.py | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/bottle.py b/bottle.py +index 9806efd..406762f 100644 +--- a/bottle.py ++++ b/bottle.py +@@ -1239,11 +1239,11 @@ class BaseRequest(object): + self['_cgi.FieldStorage'] = data #http://bugs.python.org/issue18394#msg207958 + data = data.list or [] + for item in data: +- if item.filename: ++ if item.filename is None: ++ post[item.name] = item.value ++ else: + post[item.name] = FileUpload(item.file, item.name, + item.filename, item.headers) +- else: +- post[item.name] = item.value + return post + + @property +-- +2.39.0.windows.2 + diff --git a/python-bottle.spec b/python-bottle.spec index bdd50227a2294a4832167cb58c22927d18ada82a..8bffeaec0c278b6d9a0750f4f3709b23d7ef0f96 100644 --- a/python-bottle.spec +++ b/python-bottle.spec @@ -1,6 +1,6 @@ Name: python-bottle Version: 0.12.13 -Release: 16 +Release: 17 Summary: WSGI micro web-framework for Python. License: MIT URL: http://bottlepy.org @@ -15,6 +15,7 @@ Patch0005: 0004-fix-1115-Some-modules-set-__file__-as-None.patch Patch0006: 0005-fix-1148-redirect-and-non-ascii-characters.patch Patch0007: 0006-1177-Bug-fix-of-missing-regex-escaped-back-slashes.patch Patch0008: 0007-Fix-the-Allow-header-value-in-405-Method-not-allowed.patch +Patch0009: 0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch BuildArch: noarch BuildRequires: python2-devel python2-setuptools python3-devel python3-setuptools @@ -69,6 +70,9 @@ sed -i '/^#!/d' bottle.py %{python3_sitelib}/* %changelog +* Fri Jan 05 2024 zhangliangpengkun - 0.12.13-17 +- Fix: Multipart file uploads with empty filename not detected as binary. + * Fri Dec 29 2023 zhangliangpengkun - 0.12.13-16 - Fix the Allow: header value in 405 "Method not allowed." response.