This issue has been created
 
 
XWiki Platform / cid:jira-generated-image-avatar-a8acdf5b-4fc9-404c-b7a3-e0c9e8a9414b XWIKI-23340 Open

Velocity error when using a single value in attachment.upload.allowList or blockList
 
View issue   ยท   Add comment
 

Issue created

 
cid:jira-generated-image-avatar-a2c301c4-0477-4844-af81-ef30f365b390 Simon Urli created this issue on 26/Jun/25 10:08
 
Summary: Velocity error when using a single value in attachment.upload.allowList or blockList
Issue Type: cid:jira-generated-image-avatar-a8acdf5b-4fc9-404c-b7a3-e0c9e8a9414b Bug
Affects Versions: 17.3.0
Assignee: Unassigned
Components: Web - Templates & Resources
Created: 26/Jun/25 10:08
Priority: cid:jira-generated-image-static-major-cd497a4d-1ef9-46f5-99fa-7ea87f270cdc Major
Reporter: Simon Urli
Description:

Reproduction steps:

  • Edit xwiki.properties and set a single value in attachment.upload.allowList, e.g.: 
    attachment.upload.allowList=text/plain
  • Start the wiki
  • Upload a file

Expected result:

  • There's no error in the wiki and the allow list is properly used to check the type of the uploaded file

Obtained result:

  • There's an error displayed on top of the wiki
  • It's not possible to upload anything as a javascript error occurs

Root cause of the stacktrace:

Caused by: java.lang.ClassCastException: class java.lang.String cannot be cast to class java.util.List (java.lang.String and java.util.List are in module java.base of loader 'bootstrap')
 at org.xwiki.attachment.validation.internal.DefaultAttachmentValidationConfiguration.get(DefaultAttachmentValidationConfiguration.java:144)
 at org.xwiki.attachment.validation.internal.DefaultAttachmentValidationConfiguration.lambda$getPropertyWithFallback$1(DefaultAttachmentValidationConfiguration.java:134)
 at java.base/java.util.Optional.or(Optional.java:313)
 at org.xwiki.attachment.validation.internal.DefaultAttachmentValidationConfiguration.getPropertyWithFallback(DefaultAttachmentValidationConfiguration.java:134)
 at org.xwiki.attachment.validation.internal.DefaultAttachmentValidationConfiguration.getAllowedMimetypes(DefaultAttachmentValidationConfiguration.java:89)
 at java.base/java.util.Optional.map(Optional.java:260)
 at org.xwiki.attachment.validation.AttachmentValidationScriptService.getAllowedMimetypes(AttachmentValidationScriptService.java:63)

Note that the same happen when providing a single value in the attachment.upload.blocklist property.
 
 
This message was sent by Atlassian Jira (v9.3.0#930000-sha1:287aeb6) Atlassian logo
If image attachments aren't displayed, see this article.