appirio-tech / connect-app

Build your next project on Connect with the power of crowdsourcing
https://connect.topcoder.com
44 stars 139 forks source link

[Project Service] Can't upload file with long name #3986

Open jswheeler opened 4 years ago

jswheeler commented 4 years ago

Expected behavior

Describe. User should be able to upload a file to a message in connect.

Actual behavior

Describe. Adding to an existing thread, I attempted to add a pdf with the file name "#736081 Stored XSS + Steal auth0Jwt = Account Takeover on https___apps.topcoder.com.pdf"

Steps to reproduce the problem

Screenshot/screencast

Attach or link a resource.

--

Environment

vikasrohit commented 4 years ago

Thanks for reporting it @jswheeler. I think it is not the long name that is causing the issue, it might be the special characters in the file name or presence of multiple dots. In any case, this use case seems to be rare enough i.e. it should not be the case which most of users are facing because such filenames are bit rare and mostly are auto generated names.