ZF-4314: Output of Value in Zend_View_Helper_FormFile should be removed

Issue Type:
Bug
Created:
2008-09-17T01:20:32.000+0000
Last Updated:
2008-10-10T14:41:47.000+0000
Status:
Resolved
Fix version(s):
  • 1.6.2 (13/Oct/08)
Reporter:
malt (malt)
Assignee:
Thomas Weidner (thomas)
Tags:
  • Zend_View
Related issues:
Attachments:

Description

When rendering the input field with Zend_View_Helper_FormFile, it will output the current value of the form element, which is the current uploaded file including absolute path. This is not supported by browsers anyway and is a security issue, so the output of the value in the tag should be removed.

Comments

Posted by Thomas Weidner (thomas) on 2008-09-23T10:59:01.000+0000

Fixed with r11496