When uploading files using values in file names that can result in URL encoding, the upload URL is broken

  • Profile Image
    siemonco
    Asked on October 10, 2017 at 11:29 AM

    Hi - Is there any way that I can set a validation to not allow characters in the reserved character set in attachment names?  I added a note to the field, but I only found out that their was a problem after a customer made a ton of submissions.

    In all of these cases, the user had a % in the file name.

    Is there a way that I can retrieve these attachments?  I can't do it using the link to them.  I included a link to an attachment but I can't seem to get the associated form id


    Thanks

  • Profile Image
    david
    Answered on October 10, 2017 at 12:33 PM

    I tried several different methods of recovering the file upload you referenced but it seems the use of %25 in the file name caused the upload URL to be broken.  I was able to reproduce the same in my test form, but it does seem to be confined to URL encoding. 

    As far as I know, there is no way to limit what file names are allowed for uploading and since the usage of the % symbol in file names is valid, our upload tool will see it as a valid file name.  I will forward this to our developers to have a look.  We will let you know as soon as we have any updates.