58930 - POST with enctype=multipart/form-data leaves a temp file

Status: VERIFIED DUPLICATE of bug 15320

(Core :: DOM: Core & HTML, defect, P1)

Description

[Gagan]

I couldn't find a dup bug for this one and so am recording what I found. Using a
post request with an encoding type of multipart/form-data leaves a temporary
file behind.

In order to see this,
-clean out your /tmp (or $TEMP) directory.
-click on this link above
-click submit on that page
-check to see a 'formpost' file in your temp directory!

Am leaving this as Linux (which is where I tested) but I believe this would be
all platforms.

Comment 1

[Gagan]

Subsequent posts add a number to the 'formpost' file. Adding privacy, rtm
keywords and cc'ing mstoltz.

Comment 2

[Henrik Gemal]

Also on Win2k.

To reproduce:
- Exit all apps
- Clean %TEMP
- start Mozilla
- go to http://gemal.dk/browserspy/upload.html
- upload a file
- press stop
- exit Mozilla

a file called "formpost" exits that contained the entire file you tried to send.

Comment 3

[Kevin McCluskey (gone)]

Marking rtm need info.
Setting Priority to P1, based on security issue of leaving around a file with
all of the post data.

Comment 4

[Eric Pollmann]

This is bug 15320.  Marking it a duplicate...

*** This bug has been marked as a duplicate of 15320 ***

Comment 5

[Scott Brodmerkle]

Verified dupe.