diff --git a/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch b/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch new file mode 100644 index 0000000000000000000000000000000000000000..391ec4ed8a3d015921ce5793f69be3e5d6e47505 --- /dev/null +++ b/0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch @@ -0,0 +1,32 @@ +From ed32f36b3feb8bbf1edaed4875b9820c9a71792e Mon Sep 17 00:00:00 2001 +From: Marcel Hellkamp +Date: Wed, 7 Jul 2021 13:02:33 +0200 +Subject: [PATCH] Fix: Multipart file uploads with empty filename not detected + as binary. + +--- + bottle.py | 6 +++--- + 1 file changed, 3 insertions(+), 3 deletions(-) + +diff --git a/bottle.py b/bottle.py +index 9806efd..406762f 100644 +--- a/bottle.py ++++ b/bottle.py +@@ -1239,11 +1239,11 @@ class BaseRequest(object): + self['_cgi.FieldStorage'] = data #http://bugs.python.org/issue18394#msg207958 + data = data.list or [] + for item in data: +- if item.filename: ++ if item.filename is None: ++ post[item.name] = item.value ++ else: + post[item.name] = FileUpload(item.file, item.name, + item.filename, item.headers) +- else: +- post[item.name] = item.value + return post + + @property +-- +2.39.0.windows.2 + diff --git a/python-bottle.spec b/python-bottle.spec index 6f770c5c2fef71fd37164b65728f8a8aede489cd..ad2ab194e31e721ba967e4016ffbb7f8fe86fe41 100644 --- a/python-bottle.spec +++ b/python-bottle.spec @@ -1,6 +1,6 @@ Name: python-bottle Version: 0.12.13 -Release: 17 +Release: 18 Summary: WSGI micro web-framework for Python. License: MIT URL: https://github.com/bottlepy/bottle @@ -15,6 +15,7 @@ Patch0005: 0004-fix-1115-Some-modules-set-__file__-as-None.patch Patch0006: 0005-fix-1148-redirect-and-non-ascii-characters.patch Patch0007: 0006-1177-Bug-fix-of-missing-regex-escaped-back-slashes.patch Patch0008: 0007-Fix-the-Allow-header-value-in-405-Method-not-allowed.patch +Patch0009: 0008-Fix-Multipart-file-uploads-with-empty-filename-not-d.patch BuildArch: noarch BuildRequires: python3-devel python3-setuptools @@ -52,6 +53,9 @@ sed -i '/^#!/d' bottle.py %exclude %{_bindir}/bottle.py %changelog +* Fri Jan 05 2024 zhangliangpengkun - 0.12.13-18 +- Fix: Multipart file uploads with empty filename not detected as binary. + * Fri Dec 29 2023 zhangliangpengkun - 0.12.13-17 - Fix the Allow: header value in 405 "Method not allowed." response.